{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:5a88e73b-4dd2-4556-83e3-3b4fc28bec31",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-09T17:41:28Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "events",
      "group": "",
      "version": "3.2.0",
      "description": "Node's event emitter for all engines.",
      "purl": "pkg:npm/events@3.2.0",
      "bom-ref": "pkg:npm/events@3.2.0",
      "author": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test, test:browsers"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/events.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@my-scope\\n@sindresorhus"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@sindresorhus/is/package.json\\nnode_modules/JSONStream/package.json\\nnode_modules/accepts/package.json\\nnode_modules/acorn-node/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/adm-zip/package.json\\nnode_modules/airtap/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/anymatch/package.json\\nnode_modules/archiver-utils/package.json\\nnode_modules/archiver/package.json\\nnode_modules/argparse/package.json\\nnode_modules/arr-diff/package.json\\nnode_modules/arr-flatten/package.json\\nnode_modules/arr-union/package.json\\nnode_modules/array-filter/package.json\\nnode_modules/array-flatten/package.json\\nnode_modules/array-map/package.json\\nnode_modules/array-uniq/package.json\\nnode_modules/array-unique/package.json\\nnode_modules/asn1.js/node_modules/bn.js/package.json\\nnode_modules/asn1.js/package.json\\nnode_modules/asn1/package.json\\nnode_modules/assert-plus/package.json\\nnode_modules/assert/node_modules/inherits/package.json\\nnode_modules/assert/node_modules/util/package.json\\nnode_modules/assert/package.json\\nnode_modules/assign-symbols/package.json\\nnode_modules/async-each/package.json\\nnode_modules/async/package.json\\nnode_modules/asynckit/package.json\\nnode_modules/asyncreduce/package.json\\nnode_modules/atob/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/aws-sign2/package.json\\nnode_modules/aws4/package.json\\nnode_modules/babel-code-frame/node_modules/ansi-styles/package.json\\nnode_modules/babel-code-frame/node_modules/chalk/package.json\\nnode_modules/babel-code-frame/node_modules/supports-color/package.json\\nnode_modules/babel-code-frame/package.json\\nnode_modules/babel-generator/package.json\\nnode_modules/babel-messages/package.json\\nnode_modules/babel-runtime/package.json\\nnode_modules/babel-template/package.json\\nnode_modules/babel-traverse/node_modules/debug/package.json\\nnode_modules/babel-traverse/node_modules/ms/package.json\\nnode_modules/babel-traverse/package.json\\nnode_modules/babel-types/package.json\\nnode_modules/babylon/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/base/node_modules/define-property/package.json\\nnode_modules/base/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/batch/package.json\\nnode_modules/bcrypt-pbkdf/package.json\\nnode_modules/binary-extensions/package.json\\nnode_modules/bl/package.json\\nnode_modules/bn.js/package.json\\nnode_modules/body-parser/node_modules/debug/package.json\\nnode_modules/body-parser/node_modules/ms/package.json\\nnode_modules/body-parser/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/braces/package.json\\nnode_modules/brorand/package.json\\nnode_modules/browser-pack/package.json\\nnode_modules/browser-resolve/node_modules/resolve/package.json\\nnode_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json\\nnode_modules/browser-resolve/package.json\\nnode_modules/browserify-aes/package.json\\nnode_modules/browserify-cipher/package.json\\nnode_modules/browserify-des/package.json\\nnode_modules/browserify-istanbul/package.json\\nnode_modules/browserify-rsa/node_modules/bn.js/package.json\\nnode_modules/browserify-rsa/package.json\\nnode_modules/browserify-sign/node_modules/readable-stream/package.json\\nnode_modules/browserify-sign/node_modules/string_decoder/package.json\\nnode_modules/browserify-sign/package.json\\nnode_modules/browserify-zlib/package.json\\nnode_modules/browserify/package.json\\nnode_modules/browserify/test/ignore_browser_field/node_modules/a/package.json\\nnode_modules/browserify/test/ignore_browser_field/node_modules/b/package.json\\nnode_modules/browserify/test/ignore_transform_key/node_modules/a/package.json\\nnode_modules/browserify/test/ignore_transform_key/node_modules/evil-transform/package.json\\nnode_modules/browserify/test/pkg_event/package.json\\nnode_modules/buffer-alloc-unsafe/package.json\\nnode_modules/buffer-alloc/package.json\\nnode_modules/buffer-crc32/package.json\\nnode_modules/buffer-fill/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/buffer-xor/package.json\\nnode_modules/buffer/node_modules/isarray/package.json\\nnode_modules/buffer/package.json\\nnode_modules/builtin-status-codes/package.json\\nnode_modules/bytes/package.json\\nnode_modules/cache-base/package.json\\nnode_modules/cacheable-request/node_modules/lowercase-keys/package.json\\nnode_modules/cacheable-request/package.json\\nnode_modules/cached-path-relative/package.json\\nnode_modules/caseless/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/node_modules/normalize-path/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/cipher-base/package.json\\nnode_modules/class-utils/node_modules/define-property/package.json\\nnode_modules/class-utils/node_modules/is-accessor-descriptor/package.json\\nnode_modules/class-utils/node_modules/is-data-descriptor/package.json\\nnode_modules/class-utils/node_modules/is-descriptor/node_modules/kind-of/package.json\\nnode_modules/class-utils/node_modules/is-descriptor/package.json\\nnode_modules/class-utils/package.json\\nnode_modules/clone-response/package.json\\nnode_modules/collection-visit/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/combine-source-map/node_modules/convert-source-map/package.json\\nnode_modules/combine-source-map/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/component-emitter/package.json\\nnode_modules/compress-commons/package.json\\nnode_modules/compressible/package.json\\nnode_modules/compression/node_modules/debug/package.json\\nnode_modules/compression/node_modules/ms/package.json\\nnode_modules/compression/node_modules/safe-buffer/package.json\\nnode_modules/compression/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/concat-stream/node_modules/isarray/package.json\\nnode_modules/concat-stream/node_modules/process-nextick-args/package.json\\nnode_modules/concat-stream/node_modules/readable-stream/package.json\\nnode_modules/concat-stream/package.json\\nnode_modules/console-browserify/package.json\\nnode_modules/constants-browserify/package.json\\nnode_modules/content-disposition/package.json\\nnode_modules/content-type/package.json\\nnode_modules/convert-source-map/node_modules/safe-buffer/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/cookie-signature/package.json\\nnode_modules/cookie/package.json\\nnode_modules/copy-descriptor/package.json\\nnode_modules/core-js/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/crc/node_modules/buffer/package.json\\nnode_modules/crc/package.json\\nnode_modules/crc32-stream/package.json\\nnode_modules/create-ecdh/node_modules/bn.js/package.json\\nnode_modules/create-ecdh/package.json\\nnode_modules/create-hash/package.json\\nnode_modules/create-hmac/package.json\\nnode_modules/crypto-browserify/package.json\\nnode_modules/dash-ast/package.json\\nnode_modules/dashdash/package.json\\nnode_modules/debug/package.json\\nnode_modules/decode-uri-component/package.json\\nnode_modules/decompress-response/package.json\\nnode_modules/deep-equal/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/define-property/package.json\\nnode_modules/defined/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/depd/package.json\\nnode_modules/deps-sort/package.json\\nnode_modules/des.js/package.json\\nnode_modules/destroy/package.json\\nnode_modules/detect-indent/package.json\\nnode_modules/detective/node_modules/acorn/package.json\\nnode_modules/detective/package.json\\nnode_modules/diffie-hellman/node_modules/bn.js/package.json\\nnode_modules/diffie-hellman/package.json\\nnode_modules/dom-walk/package.json\\nnode_modules/domain-browser/package.json\\nnode_modules/dotignore/package.json\\nnode_modules/duplexer2/package.json\\nnode_modules/duplexer3/package.json\\nnode_modules/ecc-jsbn/package.json\\nnode_modules/ee-first/package.json\\nnode_modules/elliptic/node_modules/bn.js/package.json\\nnode_modules/elliptic/package.json\\nnode_modules/encodeurl/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/error-stack-parser/package.json\\nnode_modules/es-abstract/package.json\\nnode_modules/es-get-iterator/package.json\\nnode_modules/es-to-primitive/package.json\\nnode_modules/escape-html/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esutils/package.json\\nnode_modules/etag/package.json\\nnode_modules/eventemitter3/package.json\\nnode_modules/events-to-array/package.json\\nnode_modules/events/package.json\\nnode_modules/evp_bytestokey/package.json\\nnode_modules/expand-brackets/node_modules/debug/package.json\\nnode_modules/expand-brackets/node_modules/define-property/package.json\\nnode_modules/expand-brackets/node_modules/is-accessor-descriptor/package.json\\nnode_modules/expand-brackets/node_modules/is-data-descriptor/package.json\\nnode_modules/expand-brackets/node_modules/is-descriptor/node_modules/kind-of/package.json\\nnode_modules/expand-brackets/node_modules/is-descriptor/package.json\\nnode_modules/expand-brackets/node_modules/ms/package.json\\nnode_modules/expand-brackets/package.json\\nnode_modules/express-state/package.json\\nnode_modules/express/node_modules/debug/package.json\\nnode_modules/express/node_modules/ms/package.json\\nnode_modules/express/node_modules/safe-buffer/package.json\\nnode_modules/express/package.json\\nnode_modules/extend-shallow/package.json\\nnode_modules/extend/package.json\\nnode_modules/extglob/node_modules/define-property/package.json\\nnode_modules/extglob/package.json\\nnode_modules/extsprintf/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-safe-stringify/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/finalhandler/node_modules/debug/package.json\\nnode_modules/finalhandler/node_modules/ms/package.json\\nnode_modules/finalhandler/package.json\\nnode_modules/find-nearest-file/package.json\\nnode_modules/firefox-profile/package.json\\nnode_modules/follow-redirects/package.json\\nnode_modules/for-each/package.json\\nnode_modules/for-in/package.json\\nnode_modules/foreach-shim/package.json\\nnode_modules/foreach/package.json\\nnode_modules/foreachasync/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/forwarded/package.json\\nnode_modules/fragment-cache/package.json\\nnode_modules/fresh/package.json\\nnode_modules/from2/package.json\\nnode_modules/fs-constants/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/functions-have-names/package.json\\nnode_modules/get-assigned-identifiers/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/get-value/package.json\\nnode_modules/getpass/package.json\\nnode_modules/glob-parent/node_modules/is-glob/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/glob/package.json\\nnode_modules/global/node_modules/process/package.json\\nnode_modules/global/package.json\\nnode_modules/globals/package.json\\nnode_modules/globs-to-files/node_modules/glob/package.json\\nnode_modules/globs-to-files/package.json\\nnode_modules/got/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/handlebars/node_modules/source-map/package.json\\nnode_modules/handlebars/package.json\\nnode_modules/har-schema/package.json\\nnode_modules/har-validator/package.json\\nnode_modules/has-ansi/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-symbol-support-x/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-to-string-tag-x/package.json\\nnode_modules/has-value/package.json\\nnode_modules/has-values/node_modules/kind-of/package.json\\nnode_modules/has-values/package.json\\nnode_modules/has/package.json\\nnode_modules/hash-base/node_modules/readable-stream/package.json\\nnode_modules/hash-base/node_modules/string_decoder/package.json\\nnode_modules/hash-base/package.json\\nnode_modules/hash.js/package.json\\nnode_modules/hbs/package.json\\nnode_modules/highlight.js/package.json\\nnode_modules/hmac-drbg/package.json\\nnode_modules/htmlescape/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http-errors/node_modules/inherits/package.json\\nnode_modules/http-errors/package.json\\nnode_modules/http-proxy/package.json\\nnode_modules/http-signature/package.json\\nnode_modules/https-browserify/package.json\\nnode_modules/humanize-duration/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/indexof/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ini/package.json\\nnode_modules/inline-source-map/package.json\\nnode_modules/insert-module-globals/node_modules/concat-stream/package.json\\nnode_modules/insert-module-globals/package.json\\nnode_modules/into-stream/package.json\\nnode_modules/invariant/package.json\\nnode_modules/ipaddr.js/package.json\\nnode_modules/is-accessor-descriptor/node_modules/kind-of/package.json\\nnode_modules/is-accessor-descriptor/package.json\\nnode_modules/is-arguments/package.json\\nnode_modules/is-bigint/package.json\\nnode_modules/is-binary-path/package.json\\nnode_modules/is-boolean-object/package.json\\nnode_modules/is-buffer/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-data-descriptor/node_modules/kind-of/package.json\\nnode_modules/is-data-descriptor/package.json\\nnode_modules/is-date-object/package.json\\nnode_modules/is-descriptor/node_modules/kind-of/package.json\\nnode_modules/is-descriptor/package.json\\nnode_modules/is-extendable/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-finite/package.json\\nnode_modules/is-function/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-map/package.json\\nnode_modules/is-number-object/package.json\\nnode_modules/is-number/package.json\\nnode_modules/is-object/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-plain-object/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-retry-allowed/package.json\\nnode_modules/is-set/package.json\\nnode_modules/is-string/package.json\\nnode_modules/is-symbol/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/is-weakmap/package.json\\nnode_modules/is-weakset/package.json\\nnode_modules/is-windows/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isobject/package.json\\nnode_modules/isstream/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-instrument/package.json\\nnode_modules/isurl/package.json\\nnode_modules/jetpack-id/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsbn/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-schema/package.json\\nnode_modules/json-stable-stringify/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/jsonify/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/jsprim/package.json\\nnode_modules/keyv/package.json\\nnode_modules/kind-of/package.json\\nnode_modules/labeled-stream-splicer/package.json\\nnode_modules/lazystream/package.json\\nnode_modules/load-script/package.json\\nnode_modules/lodash.defaults/package.json\\nnode_modules/lodash.difference/package.json\\nnode_modules/lodash.flatten/package.json\\nnode_modules/lodash.isplainobject/package.json\\nnode_modules/lodash.memoize/package.json\\nnode_modules/lodash.union/package.json\\nnode_modules/lodash/package.json\\nnode_modules/loose-envify/package.json\\nnode_modules/lowercase-keys/package.json\\nnode_modules/map-cache/package.json\\nnode_modules/map-visit/package.json\\nnode_modules/md5.js/package.json\\nnode_modules/media-typer/package.json\\nnode_modules/merge-descriptors/package.json\\nnode_modules/methods/package.json\\nnode_modules/micromatch/node_modules/extend-shallow/package.json\\nnode_modules/micromatch/node_modules/is-extendable/package.json\\nnode_modules/micromatch/node_modules/kind-of/package.json\\nnode_modules/micromatch/package.json\\nnode_modules/miller-rabin/node_modules/bn.js/package.json\\nnode_modules/miller-rabin/package.json\\nnode_modules/mime-db/package.json\\nnode_modules/mime-types/package.json\\nnode_modules/mime/package.json\\nnode_modules/mimic-response/package.json\\nnode_modules/min-document/package.json\\nnode_modules/minimalistic-assert/package.json\\nnode_modules/minimalistic-crypto-utils/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist/package.json\\nnode_modules/mixin-deep/node_modules/is-extendable/package.json\\nnode_modules/mixin-deep/package.json\\nnode_modules/mkdirp-classic/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/module-deps/package.json\\nnode_modules/ms/package.json\\nnode_modules/nanomatch/node_modules/extend-shallow/package.json\\nnode_modules/nanomatch/node_modules/is-extendable/package.json\\nnode_modules/nanomatch/node_modules/kind-of/package.json\\nnode_modules/nanomatch/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/neo-async/package.json\\nnode_modules/normalize-path/package.json\\nnode_modules/normalize-url/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/object-copy/node_modules/define-property/package.json\\nnode_modules/object-copy/node_modules/is-accessor-descriptor/package.json\\nnode_modules/object-copy/node_modules/is-data-descriptor/package.json\\nnode_modules/object-copy/node_modules/is-descriptor/node_modules/kind-of/package.json\\nnode_modules/object-copy/node_modules/is-descriptor/package.json\\nnode_modules/object-copy/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-is/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/object-visit/package.json\\nnode_modules/object.assign/package.json\\nnode_modules/object.pick/package.json\\nnode_modules/on-finished/package.json\\nnode_modules/on-headers/package.json\\nnode_modules/once/package.json\\nnode_modules/opener/package.json\\nnode_modules/optimist/node_modules/minimist/package.json\\nnode_modules/optimist/package.json\\nnode_modules/os-browserify/package.json\\nnode_modules/outpipe/package.json\\nnode_modules/p-cancelable/package.json\\nnode_modules/p-finally/package.json\\nnode_modules/p-is-promise/package.json\\nnode_modules/p-timeout/package.json\\nnode_modules/pako/package.json\\nnode_modules/parents/package.json\\nnode_modules/parse-asn1/package.json\\nnode_modules/parse-headers/package.json\\nnode_modules/parseurl/package.json\\nnode_modules/pascalcase/package.json\\nnode_modules/path-browserify/package.json\\nnode_modules/path-dirname/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-platform/package.json\\nnode_modules/path-to-regexp/package.json\\nnode_modules/pbkdf2/package.json\\nnode_modules/performance-now/package.json\\nnode_modules/pify/package.json\\nnode_modules/posix-character-classes/package.json\\nnode_modules/prepend-http/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process/package.json\\nnode_modules/proxy-addr/package.json\\nnode_modules/psl/package.json\\nnode_modules/public-encrypt/node_modules/bn.js/package.json\\nnode_modules/public-encrypt/package.json\\nnode_modules/punycode/package.json\\nnode_modules/q/package.json\\nnode_modules/qs/package.json\\nnode_modules/query-string/package.json\\nnode_modules/querystring-es3/package.json\\nnode_modules/querystring/package.json\\nnode_modules/randombytes/package.json\\nnode_modules/randomfill/package.json\\nnode_modules/range-parser/package.json\\nnode_modules/raw-body/package.json\\nnode_modules/read-only-stream/package.json\\nnode_modules/readable-stream/node_modules/isarray/package.json\\nnode_modules/readable-stream/node_modules/safe-buffer/package.json\\nnode_modules/readable-stream/node_modules/string_decoder/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/regenerator-runtime/package.json\\nnode_modules/regex-not/node_modules/extend-shallow/package.json\\nnode_modules/regex-not/node_modules/is-extendable/package.json\\nnode_modules/regex-not/package.json\\nnode_modules/regexp.prototype.flags/package.json\\nnode_modules/remove-trailing-separator/package.json\\nnode_modules/repeat-element/package.json\\nnode_modules/repeat-string/package.json\\nnode_modules/repeating/package.json\\nnode_modules/request/package.json\\nnode_modules/requires-port/package.json\\nnode_modules/resolve-url/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/responselike/package.json\\nnode_modules/resumer/package.json\\nnode_modules/ret/package.json\\nnode_modules/ripemd160/package.json\\nnode_modules/runnel/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safe-regex/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/sauce-browsers/package.json\\nnode_modules/sax/package.json\\nnode_modules/semver/package.json\\nnode_modules/send/node_modules/debug/package.json\\nnode_modules/send/node_modules/ms/package.json\\nnode_modules/send/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/serve-static/package.json\\nnode_modules/server-destroy/package.json\\nnode_modules/set-value/package.json\\nnode_modules/setprototypeof/package.json\\nnode_modules/sha.js/package.json\\nnode_modules/shasum-object/package.json\\nnode_modules/shasum/package.json\\nnode_modules/shell-quote/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/simple-concat/package.json\\nnode_modules/snapdragon-node/node_modules/define-property/package.json\\nnode_modules/snapdragon-node/package.json\\nnode_modules/snapdragon-util/package.json\\nnode_modules/snapdragon/node_modules/debug/package.json\\nnode_modules/snapdragon/node_modules/define-property/package.json\\nnode_modules/snapdragon/node_modules/is-accessor-descriptor/package.json\\nnode_modules/snapdragon/node_modules/is-data-descriptor/package.json\\nnode_modules/snapdragon/node_modules/is-descriptor/node_modules/kind-of/package.json\\nnode_modules/snapdragon/node_modules/is-descriptor/package.json\\nnode_modules/snapdragon/node_modules/ms/package.json\\nnode_modules/snapdragon/package.json\\nnode_modules/sort-keys/package.json\\nnode_modules/source-map-cjs/package.json\\nnode_modules/source-map-resolve/package.json\\nnode_modules/source-map-url/package.json\\nnode_modules/source-map/package.json\\nnode_modules/split-string/node_modules/extend-shallow/package.json\\nnode_modules/split-string/node_modules/is-extendable/package.json\\nnode_modules/split-string/package.json\\nnode_modules/split/node_modules/through/package.json\\nnode_modules/split/package.json\\nnode_modules/split2/node_modules/readable-stream/package.json\\nnode_modules/split2/node_modules/string_decoder/package.json\\nnode_modules/split2/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/sshpk/package.json\\nnode_modules/stack-generator/package.json\\nnode_modules/stack-mapper/node_modules/isarray/package.json\\nnode_modules/stack-mapper/package.json\\nnode_modules/stackframe/package.json\\nnode_modules/stacktrace-gps/node_modules/source-map/package.json\\nnode_modules/stacktrace-gps/package.json\\nnode_modules/stacktrace-js/package.json\\nnode_modules/static-extend/node_modules/define-property/package.json\\nnode_modules/static-extend/node_modules/is-accessor-descriptor/package.json\\nnode_modules/static-extend/node_modules/is-data-descriptor/package.json\\nnode_modules/static-extend/node_modules/is-descriptor/node_modules/kind-of/package.json\\nnode_modules/static-extend/node_modules/is-descriptor/package.json\\nnode_modules/static-extend/package.json\\nnode_modules/statuses/package.json\\nnode_modules/stream-browserify/package.json\\nnode_modules/stream-combiner2/package.json\\nnode_modules/stream-http/package.json\\nnode_modules/stream-splicer/package.json\\nnode_modules/strict-uri-encode/package.json\\nnode_modules/string.prototype.trim/package.json\\nnode_modules/string.prototype.trimend/package.json\\nnode_modules/string.prototype.trimstart/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/subarg/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/syntax-error/package.json\\nnode_modules/tap-finished/node_modules/tap-parser/package.json\\nnode_modules/tap-finished/package.json\\nnode_modules/tap-parser/package.json\\nnode_modules/tape/package.json\\nnode_modules/tar-stream/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/package.json\\nnode_modules/timed-out/package.json\\nnode_modules/timers-browserify/package.json\\nnode_modules/to-arraybuffer/package.json\\nnode_modules/to-buffer/package.json\\nnode_modules/to-fast-properties/package.json\\nnode_modules/to-object-path/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/to-regex/node_modules/extend-shallow/package.json\\nnode_modules/to-regex/node_modules/is-extendable/package.json\\nnode_modules/to-regex/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/trim-right/package.json\\nnode_modules/tty-browserify/package.json\\nnode_modules/tunnel-agent/package.json\\nnode_modules/tweetnacl/package.json\\nnode_modules/type-is/package.json\\nnode_modules/typedarray/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/umd/package.json\\nnode_modules/undeclared-identifiers/package.json\\nnode_modules/union-value/package.json\\nnode_modules/universalify/package.json\\nnode_modules/unpipe/package.json\\nnode_modules/unset-value/node_modules/has-value/node_modules/isobject/package.json\\nnode_modules/unset-value/node_modules/has-value/package.json\\nnode_modules/unset-value/node_modules/has-values/package.json\\nnode_modules/unset-value/node_modules/isarray/package.json\\nnode_modules/unset-value/package.json\\nnode_modules/upath/package.json\\nnode_modules/uri-js/node_modules/punycode/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/urix/package.json\\nnode_modules/url-parse-lax/package.json\\nnode_modules/url-to-options/package.json\\nnode_modules/url/node_modules/punycode/package.json\\nnode_modules/url/package.json\\nnode_modules/use/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/util/node_modules/inherits/package.json\\nnode_modules/util/package.json\\nnode_modules/utils-merge/package.json\\nnode_modules/uuid/package.json\\nnode_modules/vargs/package.json\\nnode_modules/vary/package.json\\nnode_modules/verror/package.json\\nnode_modules/vm-browserify/package.json\\nnode_modules/walk/package.json\\nnode_modules/watchify/node_modules/browserify-zlib/package.json\\nnode_modules/watchify/node_modules/browserify/package.json\\nnode_modules/watchify/node_modules/browserify/test/pkg_event/package.json\\nnode_modules/watchify/node_modules/buffer/package.json\\nnode_modules/watchify/node_modules/concat-stream/package.json\\nnode_modules/watchify/node_modules/detective/package.json\\nnode_modules/watchify/node_modules/domain-browser/package.json\\nnode_modules/watchify/node_modules/events/package.json\\nnode_modules/watchify/node_modules/https-browserify/package.json\\nnode_modules/watchify/node_modules/module-deps/package.json\\nnode_modules/watchify/node_modules/os-browserify/package.json\\nnode_modules/watchify/node_modules/pako/package.json\\nnode_modules/watchify/node_modules/stream-http/node_modules/readable-stream/package.json\\nnode_modules/watchify/node_modules/stream-http/package.json\\nnode_modules/watchify/node_modules/string_decoder/package.json\\nnode_modules/watchify/node_modules/vm-browserify/package.json\\nnode_modules/watchify/package.json\\nnode_modules/wd/node_modules/archiver-utils/package.json\\nnode_modules/wd/node_modules/archiver/node_modules/readable-stream/package.json\\nnode_modules/wd/node_modules/archiver/package.json\\nnode_modules/wd/node_modules/async/package.json\\nnode_modules/wd/node_modules/bl/node_modules/readable-stream/package.json\\nnode_modules/wd/node_modules/bl/package.json\\nnode_modules/wd/node_modules/buffer/package.json\\nnode_modules/wd/node_modules/compress-commons/package.json\\nnode_modules/wd/node_modules/crc32-stream/node_modules/readable-stream/package.json\\nnode_modules/wd/node_modules/crc32-stream/package.json\\nnode_modules/wd/node_modules/normalize-path/package.json\\nnode_modules/wd/node_modules/string_decoder/package.json\\nnode_modules/wd/node_modules/tar-stream/node_modules/readable-stream/package.json\\nnode_modules/wd/node_modules/tar-stream/package.json\\nnode_modules/wd/node_modules/zip-stream/node_modules/readable-stream/package.json\\nnode_modules/wd/node_modules/zip-stream/package.json\\nnode_modules/wd/package.json\\nnode_modules/which-boxed-primitive/package.json\\nnode_modules/which-collection/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/xhr/package.json\\nnode_modules/xml2js/package.json\\nnode_modules/xmlbuilder/package.json\\nnode_modules/xtend/package.json\\nnode_modules/yamljs/package.json\\nnode_modules/zip-stream/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "zip-stream",
      "version": "1.2.0",
      "description": "a streaming zip archive generator.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/zip-stream@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-zip-stream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-zip-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zip-stream@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/zip-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/zip-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/zip-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jeremy Faivre <contact@jeremyfa.com>"
        }
      ],
      "group": "",
      "name": "yamljs",
      "version": "0.3.0",
      "description": "Standalone JavaScript YAML 1.2 Parser & Encoder. Works under node.js and all major browsers. Also brings command line YAML/JSON conversion tools.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yamljs@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/jeremyfa/yaml.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yamljs@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yamljs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yamljs/package.json"
              }
            ],
            "concludedValue": "node_modules/yamljs/package.json"
          }
        ]
      },
      "tags": [
        "tools",
        "yaml"
      ]
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "description": "extend like a boss",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/xtend"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xtend/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xtend/package.json"
              }
            ],
            "concludedValue": "node_modules/xtend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ozgur Ozcitak <oozcitak@gmail.com>"
        }
      ],
      "group": "",
      "name": "xmlbuilder",
      "version": "11.0.1",
      "description": "An XML builder for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xmlbuilder@11.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/oozcitak/xmlbuilder-js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/oozcitak/xmlbuilder-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@11.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xmlbuilder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xmlbuilder/package.json"
              }
            ],
            "concludedValue": "node_modules/xmlbuilder/package.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Marek Kubica <marek@xivilization.net> (https://xivilization.net)"
        }
      ],
      "group": "",
      "name": "xml2js",
      "version": "0.4.23",
      "description": "Simple XML to JavaScript object converter.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.23",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Leonidas-from-XIV/node-xml2js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Leonidas-from-XIV/node-xml2js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xml2js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xml2js/package.json"
              }
            ],
            "concludedValue": "node_modules/xml2js/package.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "xhr",
      "version": "2.5.0",
      "description": "small xhr abstraction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xhr@2.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/naugtur/xhr"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xhr@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xhr/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xhr/package.json"
              }
            ],
            "concludedValue": "node_modules/xhr/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "description": "Callback wrapping utility",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrappy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrappy/package.json"
              }
            ],
            "concludedValue": "node_modules/wrappy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-wordwrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wordwrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wordwrap/package.json"
              }
            ],
            "concludedValue": "node_modules/wordwrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "which-typed-array",
      "version": "1.1.2",
      "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/which-typed-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-typed-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-typed-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-typed-array/package.json"
              }
            ],
            "concludedValue": "node_modules/which-typed-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "which-collection",
      "version": "1.0.1",
      "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-collection@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/which-collection#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/which-collection.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-collection@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-collection/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-collection/package.json"
              }
            ],
            "concludedValue": "node_modules/which-collection/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "which-boxed-primitive",
      "version": "1.0.1",
      "description": "Which kind of boxed JS primitive is this?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-boxed-primitive@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/which-boxed-primitive#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/which-boxed-primitive.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-boxed-primitive@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-boxed-primitive/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-boxed-primitive/package.json"
              }
            ],
            "concludedValue": "node_modules/which-boxed-primitive/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Adam Christian <adam.christian@gmail.com>"
        }
      ],
      "group": "",
      "name": "wd",
      "version": "1.11.4",
      "description": "WebDriver/Selenium 2 node.js client",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wd@1.11.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/admc/wd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wd@1.11.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "zip-stream",
      "version": "2.1.3",
      "description": "a streaming zip archive generator.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/zip-stream@2.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-zip-stream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-zip-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zip-stream@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/zip-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/zip-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/zip-stream/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.0",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/zip-stream/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/tar-stream/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/crc32-stream/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/bl/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/archiver/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/stream-http/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/split2/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/hash-base/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "tar-stream",
      "version": "2.1.3",
      "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-stream@2.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-stream"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mafintosh/tar-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/tar-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/tar-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/tar-stream/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/split2/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/hash-base/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/normalize-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/normalize-path/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/chokidar/node_modules/normalize-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chokidar/node_modules/normalize-path/package.json"
              }
            ],
            "concludedValue": "node_modules/chokidar/node_modules/normalize-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "crc32-stream",
      "version": "3.0.1",
      "description": "a streaming CRC32 checksumer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crc32-stream@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-crc32-stream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-crc32-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc32-stream@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/crc32-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/crc32-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/crc32-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "compress-commons",
      "version": "2.1.1",
      "description": "a library that defines a common interface for working with archive formats within node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compress-commons@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-compress-commons"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-compress-commons.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compress-commons@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/compress-commons/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/compress-commons/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/compress-commons/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "5.6.0",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@5.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/crc/node_modules/buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crc/node_modules/buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/crc/node_modules/buffer/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "4.0.2",
      "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bl@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/bl"
        },
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/bl.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/bl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/bl/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/bl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Caolan McMahon"
        }
      ],
      "group": "",
      "name": "async",
      "version": "2.6.3",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async@2.6.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://caolan.github.io/async/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/caolan/async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/async/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "archiver-utils",
      "version": "2.1.0",
      "description": "utility functions for archiver",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archiver-utils@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/archiver-utils#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/archiver-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver-utils@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/archiver-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/archiver-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/archiver-utils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "archiver",
      "version": "3.1.1",
      "description": "a streaming interface for archive generation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archiver@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-archiver"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-archiver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wd/node_modules/archiver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wd/node_modules/archiver/package.json"
              }
            ],
            "concludedValue": "node_modules/wd/node_modules/archiver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "watchify",
      "version": "3.11.1",
      "description": "watch mode for browserify builds",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/watchify@3.11.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/watchify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/watchify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchify@3.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "vm-browserify",
      "version": "1.1.2",
      "description": "vm module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/vm-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/vm-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/vm-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/vm-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John Hiesey"
        }
      ],
      "group": "",
      "name": "stream-http",
      "version": "3.1.1",
      "description": "Streaming http in the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-http@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jhiesey/stream-http#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jhiesey/stream-http.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-http@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/stream-http/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/stream-http/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/stream-http/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "1.0.11",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "licenses": [
        {
          "expression": "MIT AND Zlib"
        }
      ],
      "purl": "pkg:npm/pako@1.0.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodeca/pako"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/pako/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/pako/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/pako/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "CoderPuppy <coderpup@gmail.com>"
        }
      ],
      "group": "",
      "name": "os-browserify",
      "version": "0.3.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/CoderPuppy/os-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/os-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/os-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/os-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "module-deps",
      "version": "6.2.2",
      "description": "walk the dependency graph to generate json output that can be fed into browser-pack",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/module-deps@6.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/module-deps"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/module-deps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/module-deps@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/module-deps/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/module-deps/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/module-deps/package.json"
          }
        ]
      },
      "tags": [
        "graph",
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "https-browserify",
      "version": "1.0.0",
      "description": "https module compatability for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/https-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/https-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/https-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/https-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/https-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)"
        }
      ],
      "group": "",
      "name": "events",
      "version": "2.1.0",
      "description": "Node's event emitter for all engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/events.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/events/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/events/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/events/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)"
        }
      ],
      "group": "",
      "name": "domain-browser",
      "version": "1.2.0",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/domain-browser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/domain-browser/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/domain-browser/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "detective",
      "version": "5.2.0",
      "description": "find all require() calls by walking the AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detective@5.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/browserify/detective.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detective@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/detective/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/detective/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/detective/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Max Ogden <max@maxogden.com>"
        }
      ],
      "group": "",
      "name": "concat-stream",
      "version": "1.6.2",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/maxogden/concat-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/concat-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/node_modules/concat-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/node_modules/concat-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/node_modules/concat-stream/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "5.2.1",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Devon Govett <devongovett@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-zlib",
      "version": "0.2.0",
      "description": "Full zlib module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/devongovett/browserify-zlib"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/devongovett/browserify-zlib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/browserify-zlib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/browserify-zlib/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/browserify-zlib/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "browserify",
      "version": "16.5.1",
      "description": "browser-side require() the node way",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify@16.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/browserify/browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify@16.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchify/node_modules/browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/watchify/node_modules/browserify/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg_event",
      "version": "",
      "purl": "pkg:npm/pkg_event",
      "type": "library",
      "bom-ref": "pkg:npm/pkg_event",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchify/node_modules/browserify/test/pkg_event/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/test/pkg_event/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify/test/pkg_event/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify/test/pkg_event/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "AJ ONeal <coolaj86@gmail.com>"
        }
      ],
      "group": "",
      "name": "walk",
      "version": "2.3.14",
      "description": "A node port of python's os.walk",
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/walk@2.3.14",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://git.coolaj86.com/coolaj86/fs-walk.js"
        },
        {
          "type": "vcs",
          "url": "https://git.coolaj86.com/coolaj86/fs-walk.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk@2.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/walk/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/walk/package.json"
              }
            ],
            "concludedValue": "node_modules/walk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "vm-browserify",
      "version": "0.0.4",
      "description": "vm module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@0.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/vm-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vm-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vm-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/vm-browserify/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "description": "richer JavaScript errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/davepacheco/node-verror.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/verror/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/verror/package.json"
              }
            ],
            "concludedValue": "node_modules/verror/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "description": "Manipulate the HTTP Vary header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vary/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vary/package.json"
              }
            ],
            "concludedValue": "node_modules/vary/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexis Sellier <self@cloudhead.net>"
        }
      ],
      "group": "",
      "name": "vargs",
      "version": "0.1.0",
      "description": "practical variable argument handling",
      "purl": "pkg:npm/vargs@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/vargs@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/vargs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/vargs/package.json"
              }
            ],
            "concludedValue": "node_modules/vargs/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.4.0",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/uuidjs/uuid.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uuid/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uuid/package.json"
              }
            ],
            "concludedValue": "node_modules/uuid/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jared Hanson <jaredhanson@gmail.com> (http://www.jaredhanson.net/)"
        }
      ],
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "description": "merge() utility function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/jaredhanson/utils-merge.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/utils-merge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/utils-merge/package.json"
              }
            ],
            "concludedValue": "node_modules/utils-merge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/util-deprecate"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/util-deprecate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util-deprecate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/util-deprecate/package.json"
              }
            ],
            "concludedValue": "node_modules/util-deprecate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joyent (http://www.joyent.com)"
        }
      ],
      "group": "",
      "name": "util",
      "version": "0.10.4",
      "description": "Node.JS util module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-util"
        },
        {
          "type": "vcs",
          "url": "git://github.com/defunctzombie/node-util"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/util/package.json"
              }
            ],
            "concludedValue": "node_modules/util/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util/node_modules/inherits/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/http-errors/node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-errors/node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/http-errors/node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "use",
      "version": "3.1.1",
      "description": "Easily add plugin support to your node.js application.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/use@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/use"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/use/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/use/package.json"
              }
            ],
            "concludedValue": "node_modules/use/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steven Vachon <contact@svachon.com> (https://www.svachon.com/)"
        }
      ],
      "group": "",
      "name": "url-to-options",
      "version": "1.0.1",
      "description": "Convert a WHATWG URL to an http(s).request options object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url-to-options@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/url-to-options@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/url-to-options/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/url-to-options/package.json"
              }
            ],
            "concludedValue": "node_modules/url-to-options/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "url-parse-lax",
      "version": "3.0.0",
      "description": "Lax url.parse() with support for protocol-less URLs & IPs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url-parse-lax@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/url-parse-lax/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/url-parse-lax/package.json"
              }
            ],
            "concludedValue": "node_modules/url-parse-lax/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.11.0",
      "description": "The core `url` packaged standalone for use with Browserify.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url@0.11.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-url.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/url/package.json"
              }
            ],
            "concludedValue": "node_modules/url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/url/node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/url/node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/url/node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "urix",
      "version": "0.1.0",
      "description": "Makes Windows-style paths more unix and URI friendly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/urix@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/urix/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/urix/package.json"
              }
            ],
            "concludedValue": "node_modules/urix/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gary Court <gary.court@gmail.com>"
        }
      ],
      "group": "",
      "name": "uri-js",
      "version": "4.2.2",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/garycourt/uri-js"
        },
        {
          "type": "vcs",
          "url": "http://github.com/garycourt/uri-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Angelos Pikoulas <agelos.pikoulas@gmail.com>"
        }
      ],
      "group": "",
      "name": "upath",
      "version": "1.2.0",
      "description": "A proxy to `path`, replacing `\\` with `/` for all results & new methods to normalize & join keeping leading `./` and add, change, default, trim file extensions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/upath@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/anodynos/upath/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/anodynos/upath"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upath@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/upath/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/upath/package.json"
              }
            ],
            "concludedValue": "node_modules/upath/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "unset-value",
      "version": "1.0.0",
      "description": "Delete nested properties from an object using dot notation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unset-value@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/unset-value"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unset-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unset-value/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unset-value/package.json"
              }
            ],
            "concludedValue": "node_modules/unset-value/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unset-value/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/concat-stream/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/buffer/node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer/node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer/node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "has-values",
      "version": "0.1.4",
      "description": "Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-values@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/has-values"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unset-value/node_modules/has-values/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unset-value/node_modules/has-values/package.json"
              }
            ],
            "concludedValue": "node_modules/unset-value/node_modules/has-values/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "has-value",
      "version": "0.3.1",
      "description": "Returns true if a value exists, false if empty. Works with deeply nested values using object paths.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-value@0.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/has-value"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unset-value/node_modules/has-value/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unset-value/node_modules/has-value/package.json"
              }
            ],
            "concludedValue": "node_modules/unset-value/node_modules/has-value/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "description": "Returns true if the value is an object and not an array or null.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/isobject"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unset-value/node_modules/has-value/node_modules/isobject/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unset-value/node_modules/has-value/node_modules/isobject/package.json"
              }
            ],
            "concludedValue": "node_modules/unset-value/node_modules/has-value/node_modules/isobject/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "description": "Unpipe a stream from all destinations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unpipe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unpipe/package.json"
              }
            ],
            "concludedValue": "node_modules/unpipe/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Ryan Zimmerman <opensrc@ryanzim.com>"
        }
      ],
      "group": "",
      "name": "universalify",
      "version": "0.1.2",
      "description": "Make a callback- or promise-based function support both promises and callbacks.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/RyanZim/universalify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/RyanZim/universalify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/universalify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/universalify/package.json"
              }
            ],
            "concludedValue": "node_modules/universalify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "union-value",
      "version": "1.0.1",
      "description": "Set an array of unique values as the property of an object. Supports setting deeply nested properties using using object-paths/dot notation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/union-value@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/union-value"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/union-value@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/union-value/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/union-value/package.json"
              }
            ],
            "concludedValue": "node_modules/union-value/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Renée Kooi <renee@kooi.me>"
        }
      ],
      "group": "",
      "name": "undeclared-identifiers",
      "version": "1.1.3",
      "description": "find undeclared identifiers and property accesses in a javascript file.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/undeclared-identifiers@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/undeclared-identifiers"
        },
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/undeclared-identifiers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undeclared-identifiers@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/undeclared-identifiers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/undeclared-identifiers/package.json"
              }
            ],
            "concludedValue": "node_modules/undeclared-identifiers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "ForbesLindesay"
        }
      ],
      "group": "",
      "name": "umd",
      "version": "3.0.3",
      "description": "Universal Module Definition for use in automated build systems",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/umd@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ForbesLindesay/umd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/umd@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/umd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/umd/package.json"
              }
            ],
            "concludedValue": "node_modules/umd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)"
        }
      ],
      "group": "",
      "name": "uglify-js",
      "version": "3.10.0",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@3.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uglify-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uglify-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uglify-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "description": "TypedArray polyfill for old browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/typedarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/typedarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typedarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typedarray/package.json"
              }
            ],
            "concludedValue": "node_modules/typedarray/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.18",
      "description": "Infer the content-type of a request.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-is/package.json"
              }
            ],
            "concludedValue": "node_modules/type-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TweetNaCl-js contributors"
        }
      ],
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "description": "Port of TweetNaCl cryptographic library to JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://tweetnacl.js.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/dchest/tweetnacl-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tweetnacl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tweetnacl/package.json"
              }
            ],
            "concludedValue": "node_modules/tweetnacl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/tunnel-agent"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tunnel-agent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tunnel-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/tunnel-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tty-browserify",
      "version": "0.0.1",
      "description": "the tty module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/tty-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/tty-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tty-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tty-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tty-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/tty-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "trim-right",
      "version": "1.0.1",
      "description": "Similar to String#trim() but removes only whitespace on the right",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trim-right@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/trim-right@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/trim-right/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/trim-right/package.json"
              }
            ],
            "concludedValue": "node_modules/trim-right/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jeremy Stashewsky <jstash@gmail.com>"
        }
      ],
      "group": "",
      "name": "tough-cookie",
      "version": "2.4.3",
      "description": "RFC6265 Cookies and Cookie Jar for node.js",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/salesforce/tough-cookie"
        },
        {
          "type": "vcs",
          "url": "git://github.com/salesforce/tough-cookie.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tough-cookie/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tough-cookie/package.json"
              }
            ],
            "concludedValue": "node_modules/tough-cookie/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "to-regex-range",
      "version": "2.1.1",
      "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-regex-range@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/to-regex-range"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-regex-range/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-regex-range/package.json"
              }
            ],
            "concludedValue": "node_modules/to-regex-range/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "to-regex",
      "version": "3.0.2",
      "description": "Generate a regex from a string or array of strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/to-regex"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/to-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-extendable",
      "version": "1.0.1",
      "description": "Returns true if a value is a plain object, array or function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extendable@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-extendable"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-regex/node_modules/is-extendable/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/split-string/node_modules/is-extendable/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/regex-not/node_modules/is-extendable/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nanomatch/node_modules/is-extendable/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mixin-deep/node_modules/is-extendable/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/micromatch/node_modules/is-extendable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/micromatch/node_modules/is-extendable/package.json"
              }
            ],
            "concludedValue": "node_modules/micromatch/node_modules/is-extendable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "extend-shallow",
      "version": "3.0.2",
      "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extend-shallow@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/extend-shallow"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-regex/node_modules/extend-shallow/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/split-string/node_modules/extend-shallow/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/regex-not/node_modules/extend-shallow/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nanomatch/node_modules/extend-shallow/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/micromatch/node_modules/extend-shallow/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/micromatch/node_modules/extend-shallow/package.json"
              }
            ],
            "concludedValue": "node_modules/micromatch/node_modules/extend-shallow/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "to-object-path",
      "version": "0.3.0",
      "description": "Create an object path from a list or array of strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-object-path@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/to-object-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-object-path@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-object-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-object-path/package.json"
              }
            ],
            "concludedValue": "node_modules/to-object-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "to-fast-properties",
      "version": "1.0.3",
      "description": "Force V8 to use fast properties for an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-fast-properties@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-fast-properties/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-fast-properties/package.json"
              }
            ],
            "concludedValue": "node_modules/to-fast-properties/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "to-buffer",
      "version": "1.1.1",
      "description": "Pass in a string, get a buffer back. Pass in a buffer, get the same buffer back",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-buffer@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/to-buffer"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/to-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-buffer@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/to-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John Hiesey"
        }
      ],
      "group": "",
      "name": "to-arraybuffer",
      "version": "1.0.1",
      "description": "Get an ArrayBuffer from a Buffer as fast as possible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-arraybuffer@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jhiesey/to-arraybuffer#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jhiesey/to-arraybuffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-arraybuffer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-arraybuffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-arraybuffer/package.json"
              }
            ],
            "concludedValue": "node_modules/to-arraybuffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "J. Ryan Stinnett <jryans@gmail.com> (http://convolv.es/)"
        }
      ],
      "group": "",
      "name": "timers-browserify",
      "version": "1.4.2",
      "description": "timers module for browserify",
      "purl": "pkg:npm/timers-browserify@1.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jryans/timers-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jryans/timers-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/timers-browserify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/timers-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/timers-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vsevolod Strukchinsky <floatdrop@gmail.com>"
        }
      ],
      "group": "",
      "name": "timed-out",
      "version": "4.0.1",
      "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/timed-out@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/timed-out@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/timed-out/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/timed-out/package.json"
              }
            ],
            "concludedValue": "node_modules/timed-out/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rod Vagg <r@va.gg> (https://github.com/rvagg)"
        }
      ],
      "group": "",
      "name": "through2",
      "version": "2.0.5",
      "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/through2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/through2/package.json"
              }
            ],
            "concludedValue": "node_modules/through2/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "description": "simplified stream construction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through"
        },
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/through/package.json"
              }
            ],
            "concludedValue": "node_modules/through/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "tar-stream",
      "version": "1.6.2",
      "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-stream@1.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-stream"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mafintosh/tar-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tar-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tar-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/tar-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tape",
      "version": "5.0.1",
      "description": "tap-producing test harness for node and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tape@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/tape"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/tape.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tape@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tape/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tape/package.json"
              }
            ],
            "concludedValue": "node_modules/tape/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tap-parser",
      "version": "5.4.0",
      "description": "parse the test anything protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap-parser@5.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/tap-parser"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/tap-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-parser@5.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/tap-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tap-finished",
      "version": "0.0.1",
      "description": "detect when tap output is finished",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap-finished@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/tap-finished"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/tap-finished.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-finished@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-finished/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap-finished/package.json"
              }
            ],
            "concludedValue": "node_modules/tap-finished/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tap-parser",
      "version": "0.2.1",
      "description": "parse the test anything protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap-parser@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/tap-parser"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/tap-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-parser@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-finished/node_modules/tap-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap-finished/node_modules/tap-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/tap-finished/node_modules/tap-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "syntax-error",
      "version": "1.4.0",
      "description": "detect and report syntax errors in source code strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/syntax-error@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-syntax-error"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-syntax-error.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/syntax-error@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/syntax-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/syntax-error/package.json"
              }
            ],
            "concludedValue": "node_modules/syntax-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "subarg",
      "version": "1.0.0",
      "description": "parse arguments with recursive contexts",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/subarg@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/subarg"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/subarg.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/subarg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/subarg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/subarg/package.json"
              }
            ],
            "concludedValue": "node_modules/subarg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "description": "Strip ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/rvagg/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "string.prototype.trimstart",
      "version": "1.0.1",
      "description": "ES2019 spec-compliant String.prototype.trimStart shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/String.prototype.trimStart.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string.prototype.trimstart/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string.prototype.trimstart/package.json"
              }
            ],
            "concludedValue": "node_modules/string.prototype.trimstart/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "string.prototype.trimend",
      "version": "1.0.1",
      "description": "ES2019 spec-compliant String.prototype.trimEnd shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/String.prototype.trimEnd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimend@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string.prototype.trimend/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string.prototype.trimend/package.json"
              }
            ],
            "concludedValue": "node_modules/string.prototype.trimend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "string.prototype.trim",
      "version": "1.2.1",
      "description": "ES5 spec-compliant shim for String.prototype.trim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trim@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/String.prototype.trim.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trim@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string.prototype.trim/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string.prototype.trim/package.json"
              }
            ],
            "concludedValue": "node_modules/string.prototype.trim/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "strict-uri-encode",
      "version": "1.1.0",
      "description": "A stricter URI encode adhering to RFC 3986",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strict-uri-encode@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/strict-uri-encode@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strict-uri-encode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strict-uri-encode/package.json"
              }
            ],
            "concludedValue": "node_modules/strict-uri-encode/package.json"
          }
        ]
      },
      "tags": [
        "encode"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "stream-splicer",
      "version": "2.0.1",
      "description": "streaming pipeline with a mutable configuration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-splicer@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/stream-splicer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/stream-splicer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-splicer@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-splicer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-splicer/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-splicer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John Hiesey"
        }
      ],
      "group": "",
      "name": "stream-http",
      "version": "2.8.3",
      "description": "Streaming http in the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-http@2.8.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jhiesey/stream-http#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jhiesey/stream-http.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-http@2.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-http/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-http/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-http/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "'Dominic Tarr' <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "stream-combiner2",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/stream-combiner2"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/stream-combiner2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner2@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-combiner2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-combiner2/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-combiner2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "stream-browserify",
      "version": "2.0.2",
      "description": "the stream module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/stream-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/stream-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-browserify@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-browserify/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.4.0",
      "description": "HTTP status utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/statuses@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/statuses/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/statuses/package.json"
              }
            ],
            "concludedValue": "node_modules/statuses/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "static-extend",
      "version": "0.1.2",
      "description": "Adds a static `extend` method to a class, to simplify inheritance. Extends the static properties, prototype properties, and descriptors from a `Parent` constructor onto `Child` constructors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/static-extend@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/static-extend"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-extend@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-extend/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/static-extend/package.json"
              }
            ],
            "concludedValue": "node_modules/static-extend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-descriptor",
      "version": "0.1.6",
      "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-extend/node_modules/is-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/is-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/object-copy/node_modules/is-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/is-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/class-utils/node_modules/is-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/class-utils/node_modules/is-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/class-utils/node_modules/is-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "kind-of",
      "version": "5.1.0",
      "description": "Get the native type of a value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/kind-of"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-extend/node_modules/is-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/is-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/object-copy/node_modules/is-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/is-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/class-utils/node_modules/is-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/class-utils/node_modules/is-descriptor/node_modules/kind-of/package.json"
              }
            ],
            "concludedValue": "node_modules/class-utils/node_modules/is-descriptor/node_modules/kind-of/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-data-descriptor",
      "version": "0.1.4",
      "description": "Returns true if a value has the characteristics of a valid JavaScript data descriptor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-data-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-extend/node_modules/is-data-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/is-data-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/object-copy/node_modules/is-data-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/is-data-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/class-utils/node_modules/is-data-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/class-utils/node_modules/is-data-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/class-utils/node_modules/is-data-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "0.1.6",
      "description": "Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-accessor-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-extend/node_modules/is-accessor-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/is-accessor-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/object-copy/node_modules/is-accessor-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/is-accessor-descriptor/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/class-utils/node_modules/is-accessor-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/class-utils/node_modules/is-accessor-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/class-utils/node_modules/is-accessor-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "define-property",
      "version": "0.2.5",
      "description": "Define a non-enumerable property on an object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-property@0.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/define-property"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-extend/node_modules/define-property/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/define-property/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/object-copy/node_modules/define-property/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/define-property/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/class-utils/node_modules/define-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/class-utils/node_modules/define-property/package.json"
              }
            ],
            "concludedValue": "node_modules/class-utils/node_modules/define-property/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stacktrace-js",
      "version": "2.0.2",
      "description": "Framework-agnostic, micro-library for getting stack traces in all environments",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stacktrace-js@2.0.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.stacktracejs.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/stacktracejs/stacktrace.js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/stacktrace-js@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stacktrace-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stacktrace-js/package.json"
              }
            ],
            "concludedValue": "node_modules/stacktrace-js/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "stacktrace-gps",
      "version": "3.0.4",
      "description": "Turns partial code location into precise code location",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stacktrace-gps@3.0.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.stacktracejs.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/stacktracejs/stacktrace-gps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stacktrace-gps@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stacktrace-gps/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stacktrace-gps/package.json"
              }
            ],
            "concludedValue": "node_modules/stacktrace-gps/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.5.6",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stacktrace-gps/node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stacktrace-gps/node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/stacktrace-gps/node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.2.0",
      "description": "JS Object representation of a stack frame",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stackframe@1.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.stacktracejs.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/stacktracejs/stackframe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stackframe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stackframe/package.json"
              }
            ],
            "concludedValue": "node_modules/stackframe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "stack-mapper",
      "version": "0.2.2",
      "description": "Initialize it with a source map, then feed it error stacks to have the trace locations mapped to the original files.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stack-mapper@0.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/stack-mapper"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/stack-mapper.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-mapper@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stack-mapper/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stack-mapper/package.json"
              }
            ],
            "concludedValue": "node_modules/stack-mapper/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stack-mapper/node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stack-mapper/node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/stack-mapper/node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stack-generator",
      "version": "2.0.5",
      "description": "Generate artificial backtrace by walking arguments.callee.caller chain",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stack-generator@2.0.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.stacktracejs.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/stacktracejs/stack-generator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-generator@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stack-generator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stack-generator/package.json"
              }
            ],
            "concludedValue": "node_modules/stack-generator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joyent"
        },
        {
          "name": " Inc"
        }
      ],
      "group": "",
      "name": "sshpk",
      "version": "1.16.1",
      "description": "A library for finding and using SSH public keys",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sshpk@1.16.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/arekinath/node-sshpk#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/joyent/node-sshpk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sshpk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sshpk/package.json"
              }
            ],
            "concludedValue": "node_modules/sshpk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexandru Marasteanu <hello@alexei.ro> (http://alexei.ro/)"
        }
      ],
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "description": "JavaScript sprintf implementation",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/alexei/sprintf.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sprintf-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sprintf-js/package.json"
              }
            ],
            "concludedValue": "node_modules/sprintf-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matteo Collina <hello@matteocollina.com>"
        }
      ],
      "group": "",
      "name": "split2",
      "version": "3.1.1",
      "description": "split a Text Stream into a Line Stream, using Stream 3",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/split2@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mcollina/split2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split2@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/split2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/split2/package.json"
              }
            ],
            "concludedValue": "node_modules/split2/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "split-string",
      "version": "3.1.0",
      "description": "Split a string on a character except when the character is escaped.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/split-string@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/split-string"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split-string@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/split-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/split-string/package.json"
              }
            ],
            "concludedValue": "node_modules/split-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://bit.ly/dominictarr)"
        }
      ],
      "group": "",
      "name": "split",
      "version": "0.1.2",
      "description": "split a Text Stream into a Line Stream",
      "purl": "pkg:npm/split@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/split"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/split.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/split/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/split/package.json"
              }
            ],
            "concludedValue": "node_modules/split/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "through",
      "version": "1.1.2",
      "description": "simplified stream contruction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/through"
        },
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/split/node_modules/through/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/split/node_modules/through/package.json"
              }
            ],
            "concludedValue": "node_modules/split/node_modules/through/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "source-map-url",
      "version": "0.4.0",
      "description": "Tools for working with sourceMappingURL comments.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-url@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/source-map-url@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map-url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map-url/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map-url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "source-map-resolve",
      "version": "0.5.3",
      "description": "Resolve the source map and/or sources for a generated file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.3",
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map-resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map-resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map-resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map-cjs",
      "version": "0.1.32",
      "description": "Generates and consumes source maps. Adapted to be commonjs only and work in older browsers.",
      "purl": "pkg:npm/source-map-cjs@0.1.32",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/source-map-cjs"
        },
        {
          "type": "vcs",
          "url": "http://github.com/thlorenz/source-map-cjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-cjs@0.1.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map-cjs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map-cjs/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map-cjs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "sort-keys",
      "version": "2.0.0",
      "description": "Sort the keys of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sort-keys@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/sort-keys@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sort-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sort-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/sort-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "snapdragon-util",
      "version": "3.0.1",
      "description": "Utilities for the snapdragon parser/compiler.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/snapdragon-util@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/snapdragon-util"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-util@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon-util/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/snapdragon-util/package.json"
              }
            ],
            "concludedValue": "node_modules/snapdragon-util/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "snapdragon-node",
      "version": "2.1.1",
      "description": "Snapdragon utility for creating a new AST node in custom code, such as plugins.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/snapdragon-node@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/snapdragon-node"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-node@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/snapdragon-node/package.json"
              }
            ],
            "concludedValue": "node_modules/snapdragon-node/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "define-property",
      "version": "1.0.0",
      "description": "Define a non-enumerable property on an object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-property@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/define-property"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon-node/node_modules/define-property/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/extglob/node_modules/define-property/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/base/node_modules/define-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/base/node_modules/define-property/package.json"
              }
            ],
            "concludedValue": "node_modules/base/node_modules/define-property/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "snapdragon",
      "version": "0.8.2",
      "description": "Fast, pluggable and easy-to-use parser-renderer factory.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/snapdragon"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/snapdragon/package.json"
              }
            ],
            "concludedValue": "node_modules/snapdragon/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "description": "Tiny milisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/send/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/finalhandler/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/express/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/compression/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/body-parser/node_modules/ms/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/babel-traverse/node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-traverse/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-traverse/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "description": "small debugging utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/snapdragon/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/send/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/finalhandler/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/express/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/compression/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/body-parser/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/babel-traverse/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-traverse/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-traverse/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "simple-concat",
      "version": "1.0.1",
      "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/simple-concat@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/simple-concat"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/simple-concat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-concat@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/simple-concat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/simple-concat/package.json"
              }
            ],
            "concludedValue": "node_modules/simple-concat/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel",
      "version": "1.0.2",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "shell-quote",
      "version": "1.6.3",
      "description": "quote and parse shell commands",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shell-quote@1.6.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-shell-quote.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@1.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shell-quote/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shell-quote/package.json"
              }
            ],
            "concludedValue": "node_modules/shell-quote/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Renée Kooi <renee@kooi.me>"
        }
      ],
      "group": "",
      "name": "shasum-object",
      "version": "1.0.0",
      "description": "get the shasum of a buffer or object",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shasum-object@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/shasum-object"
        },
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/shasum-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shasum-object@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shasum-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shasum-object/package.json"
              }
            ],
            "concludedValue": "node_modules/shasum-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "'Dominic Tarr' <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "shasum",
      "version": "1.0.2",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shasum@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/shasum"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/shasum.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shasum@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shasum/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shasum/package.json"
              }
            ],
            "concludedValue": "node_modules/shasum/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "sha.js",
      "version": "2.4.11",
      "description": "Streamable SHA hashes in pure javascript",
      "licenses": [
        {
          "expression": "MIT AND BSD-3-Clause"
        }
      ],
      "purl": "pkg:npm/sha.js@2.4.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/sha.js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/sha.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sha.js@2.4.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sha.js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sha.js/package.json"
              }
            ],
            "concludedValue": "node_modules/sha.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Wes Todd"
        }
      ],
      "group": "",
      "name": "setprototypeof",
      "version": "1.1.0",
      "description": "A small polyfill for Object.setprototypeof",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/wesleytodd/setprototypeof"
        },
        {
          "type": "vcs",
          "url": "https://github.com/wesleytodd/setprototypeof.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/setprototypeof/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/setprototypeof/package.json"
              }
            ],
            "concludedValue": "node_modules/setprototypeof/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "set-value",
      "version": "2.0.1",
      "description": "Create nested values and any intermediaries using dot notation (`'a.b.c'`) paths.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-value@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/set-value"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-value/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-value/package.json"
              }
            ],
            "concludedValue": "node_modules/set-value/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "server-destroy",
      "version": "1.0.1",
      "description": "Enable destroying a server, and all currently open connections.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/server-destroy@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/server-destroy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/server-destroy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/server-destroy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/server-destroy/package.json"
              }
            ],
            "concludedValue": "node_modules/server-destroy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "serve-static",
      "version": "1.13.2",
      "description": "Serve static files",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serve-static@1.13.2",
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/serve-static/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/serve-static/package.json"
              }
            ],
            "concludedValue": "node_modules/serve-static/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eric Ferraiuolo <edf@ericf.me>"
        }
      ],
      "group": "",
      "name": "serialize-javascript",
      "version": "1.9.1",
      "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serialize-javascript@1.9.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yahoo/serialize-javascript"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yahoo/serialize-javascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/serialize-javascript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/serialize-javascript/package.json"
              }
            ],
            "concludedValue": "node_modules/serialize-javascript/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "send",
      "version": "0.16.2",
      "description": "Better streaming static file server with Range and conditional-GET support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/send@0.16.2",
      "type": "library",
      "bom-ref": "pkg:npm/send@0.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/send/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/send/package.json"
              }
            ],
            "concludedValue": "node_modules/send/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.1",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@5.7.1",
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "description": "An evented streaming XML parser in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sax/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sax/package.json"
              }
            ],
            "concludedValue": "node_modules/sax/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Luigi Pinca"
        }
      ],
      "group": "",
      "name": "sauce-browsers",
      "version": "2.0.0",
      "description": "Get a list of objects describing the OS and browser platforms on Sauce Labs using \"zuul\" format",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sauce-browsers@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lpinca/sauce-browsers"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sauce-browsers@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sauce-browsers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sauce-browsers/package.json"
              }
            ],
            "concludedValue": "node_modules/sauce-browsers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)"
        }
      ],
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/ChALkeR/safer-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safer-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safer-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safer-buffer/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "safe-regex",
      "version": "1.1.0",
      "description": "detect possibly catastrophic, exponential-time regular expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-regex@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/safe-regex"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/safe-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "runnel",
      "version": "0.5.3",
      "description": "Simple and small flow control library to execute async functions in sequence",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/runnel@0.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/runnel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/runnel@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/runnel/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/runnel/package.json"
              }
            ],
            "concludedValue": "node_modules/runnel/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ripemd160",
      "version": "2.0.2",
      "description": "Compute ripemd160 of bytes or strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ripemd160@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/ripemd160"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ripemd160@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ripemd160/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ripemd160/package.json"
              }
            ],
            "concludedValue": "node_modules/ripemd160/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roly Fentanes (https://github.com/fent)"
        }
      ],
      "group": "",
      "name": "ret",
      "version": "0.1.15",
      "description": "Tokenizes a string that represents a regular expression.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fent/ret.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ret@0.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ret/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ret/package.json"
              }
            ],
            "concludedValue": "node_modules/ret/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resumer",
      "version": "0.0.0",
      "description": "a through stream that starts paused and resumes on the next tick",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resumer@0.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/resumer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/resumer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resumer@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resumer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resumer/package.json"
              }
            ],
            "concludedValue": "node_modules/resumer/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "lukechilds"
        }
      ],
      "group": "",
      "name": "responselike",
      "version": "1.0.2",
      "description": "A response-like object for mocking a Node.js HTTP response stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/responselike@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lukechilds/responselike.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/responselike@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/responselike/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/responselike/package.json"
              }
            ],
            "concludedValue": "node_modules/responselike/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "resolve-url",
      "version": "0.2.1",
      "description": "Like Node.js’ `path.resolve`/`url.resolve` for the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve-url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve-url/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve-url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "1.17.0",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.17.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/browserify/resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mylib",
      "version": "0.0.0",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mylib@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/mylib@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "monorepo-symlink-test",
      "version": "0.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/monorepo-symlink-test@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/monorepo-symlink-test@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/multirepo/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/multirepo/package.json"
          }
        ]
      }
    },
    {
      "group": "@my-scope",
      "name": "package-b",
      "version": "0.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40my-scope/package-b@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
          }
        ]
      }
    },
    {
      "group": "@my-scope",
      "name": "package-a",
      "version": "0.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40my-scope/package-a@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invalid main",
      "version": "",
      "purl": "pkg:npm/invalid%20main",
      "type": "library",
      "bom-ref": "pkg:npm/invalid main",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/invalid_main/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/invalid_main/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/invalid_main/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser_field",
      "version": "",
      "purl": "pkg:npm/browser_field",
      "type": "library",
      "bom-ref": "pkg:npm/browser_field",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/browser_field/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/browser_field/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/browser_field/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "baz",
      "version": "",
      "purl": "pkg:npm/baz",
      "type": "library",
      "bom-ref": "pkg:npm/baz",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/baz/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/test/resolver/baz/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/test/resolver/baz/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Arnout Kazemier"
        }
      ],
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "description": "Check if a protocol requires a certain port number to be added to an URL.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/unshiftio/requires-port"
        },
        {
          "type": "vcs",
          "url": "https://github.com/unshiftio/requires-port"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/requires-port/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/requires-port/package.json"
              }
            ],
            "concludedValue": "node_modules/requires-port/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com>"
        }
      ],
      "group": "",
      "name": "request",
      "version": "2.88.0",
      "description": "Simplified HTTP request client.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/request@2.88.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/request/request.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/request/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/request/package.json"
              }
            ],
            "concludedValue": "node_modules/request/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "description": "Repeat a string - fast",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/repeating/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/repeating/package.json"
              }
            ],
            "concludedValue": "node_modules/repeating/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (http://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "description": "Repeat the given string n times. Fastest implementation for repeating a string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/repeat-string"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/repeat-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/repeat-string/package.json"
              }
            ],
            "concludedValue": "node_modules/repeat-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "repeat-element",
      "version": "1.1.3",
      "description": "Create an array by repeating the given value n times.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/repeat-element"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/repeat-element/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/repeat-element/package.json"
              }
            ],
            "concludedValue": "node_modules/repeat-element/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "darsain"
        }
      ],
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "description": "Removes separators from the end of the string.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/darsain/remove-trailing-separator#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/darsain/remove-trailing-separator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/remove-trailing-separator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/remove-trailing-separator/package.json"
              }
            ],
            "concludedValue": "node_modules/remove-trailing-separator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "regexp.prototype.flags",
      "version": "1.3.0",
      "description": "ES6 spec-compliant RegExp.prototype.flags shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regexp.prototype.flags@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/RegExp.prototype.flags.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexp.prototype.flags@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regexp.prototype.flags/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regexp.prototype.flags/package.json"
              }
            ],
            "concludedValue": "node_modules/regexp.prototype.flags/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "regex-not",
      "version": "1.0.2",
      "description": "Create a javascript regular expression for matching everything except for the given string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/regex-not"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-not@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regex-not/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regex-not/package.json"
              }
            ],
            "concludedValue": "node_modules/regex-not/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Newman <bn@cs.stanford.edu>"
        }
      ],
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.11.1",
      "description": "Runtime for Regenerator-compiled generator and async functions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.11.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/facebook/regenerator/tree/master/packages/regenerator-runtime"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regenerator-runtime/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regenerator-runtime/package.json"
              }
            ],
            "concludedValue": "node_modules/regenerator-runtime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "readdirp",
      "version": "2.2.1",
      "description": "Recursive version of fs.readdir with streaming api.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readdirp@2.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/readdirp"
        },
        {
          "type": "vcs",
          "url": "git://github.com/paulmillr/readdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/readdirp/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.7",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/express/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/convert-source-map/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/compression/node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/compression/node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/compression/node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "read-only-stream",
      "version": "2.0.0",
      "description": "wrap a readable/writable stream to be read-only",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-only-stream@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/read-only-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/read-only-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-only-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-only-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-only-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/read-only-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "raw-body",
      "version": "2.3.3",
      "description": "Get and validate the raw body of a readable stream.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/raw-body@2.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/raw-body/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/raw-body/package.json"
              }
            ],
            "concludedValue": "node_modules/raw-body/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)"
        }
      ],
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "description": "Range header field string parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/range-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/range-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/range-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "randomfill",
      "version": "1.0.4",
      "description": "random fill from browserify stand alone",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randomfill@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randomfill"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randomfill.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomfill@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/randomfill/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/randomfill/package.json"
              }
            ],
            "concludedValue": "node_modules/randomfill/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "description": "random bytes from browserify stand alone",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randombytes"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/randombytes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/randombytes/package.json"
              }
            ],
            "concludedValue": "node_modules/randombytes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com>"
        }
      ],
      "group": "",
      "name": "querystring-es3",
      "version": "0.2.1",
      "description": "Node's querystring module for all engines. (ES3 compat fork)",
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/mike-spainhower/querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring-es3@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/querystring-es3/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/querystring-es3/package.json"
              }
            ],
            "concludedValue": "node_modules/querystring-es3/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com>"
        }
      ],
      "group": "",
      "name": "querystring",
      "version": "0.2.0",
      "description": "Node's querystring module for all engines.",
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/querystring/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/querystring/package.json"
              }
            ],
            "concludedValue": "node_modules/querystring/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "query-string",
      "version": "5.1.1",
      "description": "Parse and stringify URL query strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/query-string@5.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/query-string@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/query-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/query-string/package.json"
              }
            ],
            "concludedValue": "node_modules/query-string/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.2",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/qs@6.5.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/qs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/qs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/qs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/qs/package.json"
              }
            ],
            "concludedValue": "node_modules/qs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kris Kowal <kris@cixar.com> (https://github.com/kriskowal)"
        }
      ],
      "group": "",
      "name": "q",
      "version": "1.5.1",
      "description": "A library for promises (CommonJS/Promises/A,B,D)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/q@1.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kriskowal/q"
        },
        {
          "type": "vcs",
          "url": "git://github.com/kriskowal/q.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/q/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/q/package.json"
              }
            ],
            "concludedValue": "node_modules/q/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf"
        }
      ],
      "group": "",
      "name": "public-encrypt",
      "version": "4.0.3",
      "description": "browserify version of publicEncrypt & privateDecrypt",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/public-encrypt@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/publicEncrypt"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/publicEncrypt.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/public-encrypt@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/public-encrypt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/public-encrypt/package.json"
              }
            ],
            "concludedValue": "node_modules/public-encrypt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "bn.js",
      "version": "4.11.9",
      "description": "Big number implementation in pure javascript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bn.js@4.11.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/bn.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@4.11.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/public-encrypt/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/miller-rabin/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/elliptic/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/diffie-hellman/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/create-ecdh/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-rsa/node_modules/bn.js/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/asn1.js/node_modules/bn.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asn1.js/node_modules/bn.js/package.json"
              }
            ],
            "concludedValue": "node_modules/asn1.js/node_modules/bn.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lupo Montero <lupomontero@gmail.com> (https://lupomontero.com/)"
        }
      ],
      "group": "",
      "name": "psl",
      "version": "1.8.0",
      "description": "Domain name parser based on the Public Suffix List",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/psl@1.8.0",
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/psl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/psl/package.json"
              }
            ],
            "concludedValue": "node_modules/psl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.6",
      "description": "Determine address of proxied request",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/proxy-addr/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/proxy-addr/package.json"
              }
            ],
            "concludedValue": "node_modules/proxy-addr/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process-nextick-args/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process-nextick-args/package.json"
              }
            ],
            "concludedValue": "node_modules/process-nextick-args/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "description": "process information for node.js and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-process.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process/package.json"
              }
            ],
            "concludedValue": "node_modules/process/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "prepend-http",
      "version": "2.0.0",
      "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prepend-http@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prepend-http/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prepend-http/package.json"
              }
            ],
            "concludedValue": "node_modules/prepend-http/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "posix-character-classes",
      "version": "0.1.1",
      "description": "POSIX character classes for creating regular expressions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/posix-character-classes@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/posix-character-classes"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/posix-character-classes@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/posix-character-classes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/posix-character-classes/package.json"
              }
            ],
            "concludedValue": "node_modules/posix-character-classes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "description": "Promisify a callback-style function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pify/package.json"
              }
            ],
            "concludedValue": "node_modules/pify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Braveg1rl <braveg1rl@outlook.com>"
        }
      ],
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "description": "Implements performance.now (based on process.hrtime).",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/braveg1rl/performance-now"
        },
        {
          "type": "vcs",
          "url": "git://github.com/braveg1rl/performance-now.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/performance-now/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/performance-now/package.json"
              }
            ],
            "concludedValue": "node_modules/performance-now/package.json"
          }
        ]
      },
      "tags": [
        "performance"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Cousens"
        }
      ],
      "group": "",
      "name": "pbkdf2",
      "version": "3.1.1",
      "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/pbkdf2"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/pbkdf2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pbkdf2@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pbkdf2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pbkdf2/package.json"
              }
            ],
            "concludedValue": "node_modules/pbkdf2/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "description": "Express style path to RegExp utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/component/path-to-regexp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-to-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-to-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/path-to-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Timothy J Fontaine <tjfontaine@gmail.com> (http://atxconsulting.com)"
        }
      ],
      "group": "",
      "name": "path-platform",
      "version": "0.11.15",
      "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-platform@0.11.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/tjfontaine/node-path-platform"
        },
        {
          "type": "vcs",
          "url": "http://github.com/tjfontaine/node-path-platform.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-platform@0.11.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-platform/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-platform/package.json"
              }
            ],
            "concludedValue": "node_modules/path-platform/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Javier Blanco <http://jbgutierrez.info>"
        }
      ],
      "group": "",
      "name": "path-parse",
      "version": "1.0.6",
      "description": "Node.js path.parse() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/path-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-is-absolute/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-is-absolute/package.json"
              }
            ],
            "concludedValue": "node_modules/path-is-absolute/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Elan Shanker"
        }
      ],
      "group": "",
      "name": "path-dirname",
      "version": "1.0.2",
      "description": "Node.js path.dirname() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-dirname@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/path-dirname@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-dirname/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-dirname/package.json"
              }
            ],
            "concludedValue": "node_modules/path-dirname/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "path-browserify",
      "version": "0.0.1",
      "description": "the path module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/path-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/path-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/path-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "pascalcase",
      "version": "0.1.1",
      "description": "Convert a string to pascal-case.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pascalcase@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/pascalcase"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascalcase@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pascalcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pascalcase/package.json"
              }
            ],
            "concludedValue": "node_modules/pascalcase/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "description": "parse a url with memoization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parseurl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parseurl/package.json"
              }
            ],
            "concludedValue": "node_modules/parseurl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "David Björklund <david.bjorklund@gmail.com>"
        }
      ],
      "group": "",
      "name": "parse-headers",
      "version": "2.0.3",
      "description": "Parse http headers, works with browserify/xhr",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-headers@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kesla/parse-headers"
        },
        {
          "type": "vcs",
          "url": "https://github.com/kesla/parse-headers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-headers@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-headers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-headers/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-headers/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-asn1",
      "version": "5.1.5",
      "description": "utility library for parsing asn1 files for use with browserify-sign.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-asn1@5.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/parse-asn1.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-asn1@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-asn1/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-asn1/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-asn1/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "parents",
      "version": "1.0.1",
      "description": "return all the parent directories for a directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parents@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-parents"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-parents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parents@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parents/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parents/package.json"
              }
            ],
            "concludedValue": "node_modules/parents/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "0.2.9",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pako@0.2.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodeca/pako"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pako/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pako/package.json"
              }
            ],
            "concludedValue": "node_modules/pako/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-timeout",
      "version": "2.0.1",
      "description": "Timeout a promise after a specified amount of time",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-timeout@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/p-timeout@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-timeout/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-timeout/package.json"
              }
            ],
            "concludedValue": "node_modules/p-timeout/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-is-promise",
      "version": "1.1.0",
      "description": "Check if something is a promise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-is-promise@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-is-promise@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-is-promise/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-is-promise/package.json"
              }
            ],
            "concludedValue": "node_modules/p-is-promise/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-finally/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-finally/package.json"
              }
            ],
            "concludedValue": "node_modules/p-finally/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-cancelable",
      "version": "0.4.1",
      "description": "Create a promise that can be canceled",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-cancelable@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/p-cancelable@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-cancelable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-cancelable/package.json"
              }
            ],
            "concludedValue": "node_modules/p-cancelable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "substack"
        }
      ],
      "group": "",
      "name": "outpipe",
      "version": "1.1.1",
      "description": "write output to a file through shell commands",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/outpipe@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/outpipe"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/outpipe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/outpipe@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/outpipe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/outpipe/package.json"
              }
            ],
            "concludedValue": "node_modules/outpipe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Drew Young"
        }
      ],
      "group": "",
      "name": "os-browserify",
      "version": "0.1.2",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/drewyoung1/os-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/os-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/os-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/os-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-optimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optimist/package.json"
              }
            ],
            "concludedValue": "node_modules/optimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optimist/node_modules/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optimist/node_modules/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/optimist/node_modules/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "opener",
      "version": "1.5.1",
      "description": "Opens stuff, like webpages and files and executables, cross-platform",
      "licenses": [
        {
          "expression": "WTFPL OR MIT"
        }
      ],
      "purl": "pkg:npm/opener@1.5.1",
      "type": "library",
      "bom-ref": "pkg:npm/opener@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/opener/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/opener/package.json"
              }
            ],
            "concludedValue": "node_modules/opener/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "description": "Run a function exactly one time",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/once"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/once/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/once/package.json"
              }
            ],
            "concludedValue": "node_modules/once/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "on-headers",
      "version": "1.0.2",
      "description": "Execute a listener when a response is about to write headers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/on-headers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/on-headers/package.json"
              }
            ],
            "concludedValue": "node_modules/on-headers/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "description": "Execute a callback when a request closes, finishes, or errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/on-finished/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/on-finished/package.json"
              }
            ],
            "concludedValue": "node_modules/on-finished/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "object.pick",
      "version": "1.3.0",
      "description": "Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.pick@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/object.pick"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.pick@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.pick/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.pick/package.json"
              }
            ],
            "concludedValue": "node_modules/object.pick/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "object.assign",
      "version": "4.1.0",
      "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/object.assign.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.assign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.assign/package.json"
              }
            ],
            "concludedValue": "node_modules/object.assign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "object-visit",
      "version": "1.0.1",
      "description": "Call a specified method on each value in the given object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-visit@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/object-visit"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-visit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-visit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-visit/package.json"
              }
            ],
            "concludedValue": "node_modules/object-visit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/object-keys.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/object-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "object-is",
      "version": "1.1.2",
      "description": "ES2015-compliant shim for Object.is - differentiates between -0 and +0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-is@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/object-is"
        },
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/object-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-is@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-is/package.json"
              }
            ],
            "concludedValue": "node_modules/object-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "object-inspect",
      "version": "1.8.0",
      "description": "string representations of objects in node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/object-inspect"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/object-inspect.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-inspect/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-inspect/package.json"
              }
            ],
            "concludedValue": "node_modules/object-inspect/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "object-copy",
      "version": "0.1.0",
      "description": "Copy static properties, prototype properties, and descriptors from one object to another.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-copy@0.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/object-copy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-copy@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-copy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-copy/package.json"
              }
            ],
            "concludedValue": "node_modules/object-copy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "description": "ES2015 `Object.assign()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-assign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-assign/package.json"
              }
            ],
            "concludedValue": "node_modules/object-assign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/oauth-sign"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/oauth-sign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/oauth-sign/package.json"
              }
            ],
            "concludedValue": "node_modules/oauth-sign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "normalize-url",
      "version": "2.0.1",
      "description": "Normalize a URL",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-url@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/normalize-url@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/normalize-url/package.json"
              }
            ],
            "concludedValue": "node_modules/normalize-url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "normalize-path",
      "version": "2.1.1",
      "description": "Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/normalize-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/normalize-path/package.json"
              }
            ],
            "concludedValue": "node_modules/normalize-path/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/suguru03/neo-async"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/neo-async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/neo-async/package.json"
              }
            ],
            "concludedValue": "node_modules/neo-async/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.2",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/negotiator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/negotiator/package.json"
              }
            ],
            "concludedValue": "node_modules/negotiator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "nanomatch",
      "version": "1.2.13",
      "description": "Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but complete Bash 4.3 wildcard support only (no support for exglobs, posix brackets or braces)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/nanomatch"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanomatch@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nanomatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nanomatch/package.json"
              }
            ],
            "concludedValue": "node_modules/nanomatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "kind-of",
      "version": "6.0.3",
      "description": "Get the native type of a value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/kind-of"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nanomatch/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/micromatch/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/is-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/is-data-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/is-accessor-descriptor/node_modules/kind-of/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-accessor-descriptor/node_modules/kind-of/package.json"
              }
            ],
            "concludedValue": "node_modules/is-accessor-descriptor/node_modules/kind-of/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "module-deps",
      "version": "4.1.1",
      "description": "walk the dependency graph to generate json output that can be fed into browser-pack",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/module-deps@4.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/module-deps"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/module-deps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/module-deps@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/module-deps/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/module-deps/package.json"
              }
            ],
            "concludedValue": "node_modules/module-deps/package.json"
          }
        ]
      },
      "tags": [
        "graph",
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "mkdirp-classic",
      "version": "0.5.3",
      "description": "Mirror of mkdirp 0.5.2",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp-classic@0.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/mkdirp-classic"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/mkdirp-classic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp-classic@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mkdirp-classic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mkdirp-classic/package.json"
              }
            ],
            "concludedValue": "node_modules/mkdirp-classic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.5.5",
      "description": "Recursively mkdir, like `mkdir -p`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "mixin-deep",
      "version": "1.3.2",
      "description": "Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/mixin-deep"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mixin-deep@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mixin-deep/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mixin-deep/package.json"
              }
            ],
            "concludedValue": "node_modules/mixin-deep/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "1.2.5",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "minimalistic-crypto-utils",
      "version": "1.0.1",
      "description": "Minimalistic tools for JS crypto modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/minimalistic-crypto-utils#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimalistic-crypto-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimalistic-crypto-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/minimalistic-crypto-utils/package.json"
          }
        ]
      },
      "tags": [
        "crypto",
        "tools"
      ]
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.1",
      "description": "minimalistic-assert ===",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/minimalistic-assert"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/minimalistic-assert.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimalistic-assert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimalistic-assert/package.json"
              }
            ],
            "concludedValue": "node_modules/minimalistic-assert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "min-document",
      "version": "2.19.0",
      "description": "A minimal DOM implementation",
      "purl": "pkg:npm/min-document@2.19.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/min-document"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/min-document@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/min-document/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/min-document/package.json"
              }
            ],
            "concludedValue": "node_modules/min-document/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "mimic-response",
      "version": "1.0.1",
      "description": "Mimic a Node.js HTTP response stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mimic-response@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/mimic-response@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mimic-response/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mimic-response/package.json"
              }
            ],
            "concludedValue": "node_modules/mimic-response/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.27",
      "description": "The ultimate javascript content-type utility.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.27",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime-types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime-types/package.json"
              }
            ],
            "concludedValue": "node_modules/mime-types/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.44.0",
      "description": "Media Type Database",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.44.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.44.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime-db/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime-db/package.json"
              }
            ],
            "concludedValue": "node_modules/mime-db/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Robert Kieffer <robert@broofa.com> (http://github.com/broofa)"
        }
      ],
      "group": "",
      "name": "mime",
      "version": "1.4.1",
      "description": "A comprehensive library for mime-type mapping",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/broofa/node-mime"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime/package.json"
              }
            ],
            "concludedValue": "node_modules/mime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "miller-rabin",
      "version": "4.0.1",
      "description": "Miller Rabin algorithm for primality test",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/miller-rabin@4.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/miller-rabin"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/miller-rabin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/miller-rabin/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/miller-rabin/package.json"
              }
            ],
            "concludedValue": "node_modules/miller-rabin/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "micromatch",
      "version": "3.1.10",
      "description": "Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/micromatch"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/micromatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/micromatch/package.json"
              }
            ],
            "concludedValue": "node_modules/micromatch/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "description": "HTTP methods that node supports",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/methods/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/methods/package.json"
              }
            ],
            "concludedValue": "node_modules/methods/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "description": "Merge objects using descriptors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/merge-descriptors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/merge-descriptors/package.json"
              }
            ],
            "concludedValue": "node_modules/merge-descriptors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "description": "Simple RFC 6838 media type parser and formatter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/media-typer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/media-typer/package.json"
              }
            ],
            "concludedValue": "node_modules/media-typer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kirill Fomichev <fanatid@ya.ru> (https://github.com/fanatid)"
        }
      ],
      "group": "",
      "name": "md5.js",
      "version": "1.3.5",
      "description": "node style md5 on pure JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/md5.js@1.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/md5.js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/md5.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/md5.js@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/md5.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/md5.js/package.json"
              }
            ],
            "concludedValue": "node_modules/md5.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "map-visit",
      "version": "1.0.0",
      "description": "Map `visit` over an array of objects.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-visit@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/map-visit"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/map-visit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/map-visit/package.json"
              }
            ],
            "concludedValue": "node_modules/map-visit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "map-cache",
      "version": "0.2.2",
      "description": "Basic cache object for storing key-value pairs.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/map-cache"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-cache@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/map-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/map-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/map-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.1",
      "description": "Lowercase the keys of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lowercase-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lowercase-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/lowercase-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andres Suarez <zertosh@gmail.com>"
        }
      ],
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zertosh/loose-envify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/zertosh/loose-envify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/loose-envify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/loose-envify/package.json"
              }
            ],
            "concludedValue": "node_modules/loose-envify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.union",
      "version": "4.6.0",
      "description": "The lodash method `_.union` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.union@4.6.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.union@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.union/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.union/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.union/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.memoize",
      "version": "3.0.4",
      "description": "The modern build of lodash’s `_.memoize` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.memoize@3.0.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.memoize/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.memoize/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.memoize/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "description": "The lodash method `_.isPlainObject` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.isplainobject/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.isplainobject/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.isplainobject/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.flatten",
      "version": "4.4.0",
      "description": "The lodash method `_.flatten` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.flatten@4.4.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flatten@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.flatten/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.flatten/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.flatten/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.difference",
      "version": "4.5.0",
      "description": "The lodash method `_.difference` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.difference@4.5.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.difference@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.difference/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.difference/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.difference/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "description": "The lodash method `_.defaults` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.defaults/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.defaults/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.defaults/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash",
      "version": "4.17.19",
      "description": "Lodash modular utilities.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.19",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-script",
      "version": "1.0.0",
      "description": "Dynamic script loading for browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/load-script@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/eldargab/load-script"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-script@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/load-script/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/load-script/package.json"
              }
            ],
            "concludedValue": "node_modules/load-script/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonas Pommerening <jonas.pommerening@gmail.com> (https://npmjs.org/~jpommerening)"
        }
      ],
      "group": "",
      "name": "lazystream",
      "version": "1.0.0",
      "description": "Open Node Streams on demand.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lazystream@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jpommerening/node-lazystream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jpommerening/node-lazystream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazystream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lazystream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lazystream/package.json"
              }
            ],
            "concludedValue": "node_modules/lazystream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "labeled-stream-splicer",
      "version": "2.0.2",
      "description": "stream splicer with labels",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/labeled-stream-splicer@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/labeled-stream-splicer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/labeled-stream-splicer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/labeled-stream-splicer@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/labeled-stream-splicer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/labeled-stream-splicer/package.json"
              }
            ],
            "concludedValue": "node_modules/labeled-stream-splicer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "description": "Get the native type of a value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/kind-of"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/kind-of/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/kind-of/package.json"
              }
            ],
            "concludedValue": "node_modules/kind-of/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)"
        }
      ],
      "group": "",
      "name": "keyv",
      "version": "3.0.0",
      "description": "Simple key-value storage with support for multiple backends",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/keyv@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lukechilds/keyv"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lukechilds/keyv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/keyv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/keyv/package.json"
              }
            ],
            "concludedValue": "node_modules/keyv/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "description": "utilities for primitive JavaScript types",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/joyent/node-jsprim.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsprim/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsprim/package.json"
              }
            ],
            "concludedValue": "node_modules/jsprim/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tim Caswell <tim@creationix.com>"
        }
      ],
      "group": "",
      "name": "jsonparse",
      "version": "1.3.1",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/creationix/jsonparse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonparse/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonparse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Douglas Crockford (http://crockford.com/)"
        }
      ],
      "group": "",
      "name": "jsonify",
      "version": "0.0.0",
      "description": "JSON without touching any globals",
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/jsonify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonify/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "JP Richardson <jprichardson@gmail.com>"
        }
      ],
      "group": "",
      "name": "jsonfile",
      "version": "4.0.0",
      "description": "Easily read/write JSON files.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonfile/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonfile/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonfile/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/json-stringify-safe"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/json-stringify-safe"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stringify-safe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stringify-safe/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stringify-safe/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "json-stable-stringify",
      "version": "0.0.1",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stable-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stable-stringify/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-schema-traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-schema-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/json-schema-traverse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Kris Zyp"
        }
      ],
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "description": "JSON Schema validation and specifications",
      "purl": "pkg:npm/json-schema@0.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/kriszyp/json-schema"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-schema/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/json-schema/package.json"
          }
        ]
      },
      "tags": [
        "validation"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "json-buffer",
      "version": "3.0.0",
      "description": "JSON parse & stringify that supports binary via bops & base64",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/json-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/json-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/json-buffer/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "jsesc",
      "version": "1.3.0",
      "description": "A JavaScript library for escaping JavaScript strings while generating the shortest possible valid output.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@1.3.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/jsesc"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/jsesc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsesc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsesc/package.json"
              }
            ],
            "concludedValue": "node_modules/jsesc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tom Wu"
        }
      ],
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/andyperlitch/jsbn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsbn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsbn/package.json"
              }
            ],
            "concludedValue": "node_modules/jsbn/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "3.14.0",
      "description": "YAML 1.2 parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodeca/js-yaml"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "js-tokens",
      "version": "3.0.2",
      "description": "A regex that tokenizes JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-tokens/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-tokens/package.json"
              }
            ],
            "concludedValue": "node_modules/js-tokens/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Santell (http://github.com/jsantell)"
        }
      ],
      "group": "",
      "name": "jetpack-id",
      "version": "1.0.0",
      "description": "Creates an ID from a Firefox Jetpack manifest",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0",
            "url": "https://opensource.org/licenses/MPL-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Copyleft Limited"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jetpack-id@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/jsantell/jetpack-id"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jetpack-id@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jetpack-id/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Copyleft Limited"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jetpack-id/package.json"
              }
            ],
            "concludedValue": "node_modules/jetpack-id/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steven Vachon <contact@svachon.com> (https://www.svachon.com/)"
        }
      ],
      "group": "",
      "name": "isurl",
      "version": "1.0.0",
      "description": "Checks whether a value is a WHATWG URL.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isurl@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isurl@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isurl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isurl/package.json"
              }
            ],
            "concludedValue": "node_modules/isurl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "1.10.2",
      "description": "Core istanbul API for JS code coverage",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@1.10.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@1.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-instrument/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-instrument/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-instrument/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "1.2.1",
      "description": "Data library for istanbul coverage objects",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/istanbuljs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-coverage/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-coverage/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-coverage/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Rod Vagg <rod@vagg.org>"
        }
      ],
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "description": "Determine if an object is a Stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/isstream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/isstream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isstream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isstream/package.json"
              }
            ],
            "concludedValue": "node_modules/isstream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "description": "Returns true if the value is an object and not an array or null.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/isobject"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isobject/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isobject/package.json"
              }
            ],
            "concludedValue": "node_modules/isobject/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "2.0.5",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-windows",
      "version": "1.0.2",
      "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-windows"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-windows/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-windows/package.json"
              }
            ],
            "concludedValue": "node_modules/is-windows/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-weakset",
      "version": "2.0.1",
      "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-weakset@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-weakset#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-weakset.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakset@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-weakset/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-weakset/package.json"
              }
            ],
            "concludedValue": "node_modules/is-weakset/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-weakmap",
      "version": "2.0.1",
      "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-weakmap@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-weakmap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-weakmap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakmap@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-weakmap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-weakmap/package.json"
              }
            ],
            "concludedValue": "node_modules/is-weakmap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Hugh Kennedy <hughskennedy@gmail.com> (http://hughsk.io/)"
        }
      ],
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "description": "Detect whether or not an object is a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hughsk/is-typedarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hughsk/is-typedarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-typedarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-typedarray/package.json"
              }
            ],
            "concludedValue": "node_modules/is-typedarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-typed-array",
      "version": "1.1.3",
      "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-typed-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typed-array@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-typed-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-typed-array/package.json"
              }
            ],
            "concludedValue": "node_modules/is-typed-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-symbol",
      "version": "1.0.3",
      "description": "Determine if a value is an ES6 Symbol or not.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-symbol.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-symbol/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-symbol/package.json"
              }
            ],
            "concludedValue": "node_modules/is-symbol/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-string",
      "version": "1.0.5",
      "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-string@1.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-string.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-string@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-string/package.json"
              }
            ],
            "concludedValue": "node_modules/is-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-set",
      "version": "2.0.1",
      "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-set@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-set#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-set.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-set@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-set/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-set/package.json"
              }
            ],
            "concludedValue": "node_modules/is-set/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)"
        }
      ],
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.2.0",
      "description": "Is retry allowed for Error?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-retry-allowed/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-retry-allowed/package.json"
              }
            ],
            "concludedValue": "node_modules/is-retry-allowed/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-regex",
      "version": "1.1.0",
      "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/is-regex"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/is-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "description": "Returns true if an object was created by the `Object` constructor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-plain-object"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-plain-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-plain-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-plain-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-plain-obj",
      "version": "1.1.0",
      "description": "Check if a value is a plain object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-plain-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-plain-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/is-plain-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-object",
      "version": "1.0.1",
      "description": "Checks whether a value is an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-object@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/is-object"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-number-object",
      "version": "1.0.4",
      "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number-object@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-number-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number-object@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-number-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-number-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-number-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "description": "Returns true if the value is a number. comprehensive tests.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-number"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-number/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-number/package.json"
              }
            ],
            "concludedValue": "node_modules/is-number/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-map",
      "version": "2.0.1",
      "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-map@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-map#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-map@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-map/package.json"
              }
            ],
            "concludedValue": "node_modules/is-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-glob",
      "version": "4.0.1",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/is-glob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-glob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Stephen Sugden <me@stephensugden.com>"
        }
      ],
      "group": "",
      "name": "is-function",
      "version": "1.0.2",
      "description": "is that thing a function? Use this module to find out",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-function@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/grncdr/js-is-function"
        },
        {
          "type": "vcs",
          "url": "git://github.com/grncdr/js-is-function.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-function@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-function/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-function/package.json"
              }
            ],
            "concludedValue": "node_modules/is-function/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-finite",
      "version": "1.1.0",
      "description": "ES2015 Number.isFinite() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-finite@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-finite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-finite/package.json"
              }
            ],
            "concludedValue": "node_modules/is-finite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "description": "Returns true if a string has an extglob.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-extglob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-extglob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-extglob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-extglob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-extendable"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-extendable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-extendable/package.json"
              }
            ],
            "concludedValue": "node_modules/is-extendable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-descriptor",
      "version": "1.0.2",
      "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-descriptor@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/is-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "is-date-object",
      "version": "1.0.2",
      "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-date-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-date-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-date-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-date-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-data-descriptor",
      "version": "1.0.0",
      "description": "Returns true if a value has the characteristics of a valid JavaScript data descriptor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-data-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-data-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-data-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/is-data-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-callable",
      "version": "1.2.0",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-callable.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-callable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-callable/package.json"
              }
            ],
            "concludedValue": "node_modules/is-callable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org/)"
        }
      ],
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "description": "Determine if an object is a Buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/is-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/is-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-boolean-object",
      "version": "1.0.1",
      "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-boolean-object@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-boolean-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-boolean-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-boolean-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-boolean-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-boolean-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-binary-path",
      "version": "1.0.1",
      "description": "Check if a filepath is a binary file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-binary-path@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-binary-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-binary-path/package.json"
              }
            ],
            "concludedValue": "node_modules/is-binary-path/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-bigint",
      "version": "1.0.0",
      "description": "Is this value an ES BigInt?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-bigint@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/is-bigint#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/is-bigint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-bigint@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-bigint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-bigint/package.json"
              }
            ],
            "concludedValue": "node_modules/is-bigint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-arguments",
      "version": "1.0.4",
      "description": "Is this an arguments object? It's a harder question than you think.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-arguments@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/is-arguments"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/is-arguments.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arguments@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-arguments/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-arguments/package.json"
              }
            ],
            "concludedValue": "node_modules/is-arguments/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "1.0.0",
      "description": "Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-accessor-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-accessor-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-accessor-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/is-accessor-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "whitequark <whitequark@whitequark.org>"
        }
      ],
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ipaddr.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ipaddr.js/package.json"
              }
            ],
            "concludedValue": "node_modules/ipaddr.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andres Suarez <zertosh@gmail.com>"
        }
      ],
      "group": "",
      "name": "invariant",
      "version": "2.2.4",
      "description": "invariant",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/invariant@2.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/invariant@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/invariant/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/invariant/package.json"
              }
            ],
            "concludedValue": "node_modules/invariant/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "into-stream",
      "version": "3.1.0",
      "description": "Convert a buffer/string/array/object/iterable/promise into a stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/into-stream@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/into-stream@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/into-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/into-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/into-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "insert-module-globals",
      "version": "7.2.0",
      "description": "insert implicit module globals into a module-deps stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/insert-module-globals@7.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/insert-module-globals"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/insert-module-globals.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/insert-module-globals@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/insert-module-globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/insert-module-globals/package.json"
              }
            ],
            "concludedValue": "node_modules/insert-module-globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "inline-source-map",
      "version": "0.6.2",
      "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/inline-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/inline-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inline-source-map@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inline-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inline-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/inline-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "ini",
      "version": "1.3.5",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/ini.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ini/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ini/package.json"
              }
            ],
            "concludedValue": "node_modules/ini/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/inflight"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/inflight.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inflight/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inflight/package.json"
              }
            ],
            "concludedValue": "node_modules/inflight/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "description": "Microsoft sucks",
      "purl": "pkg:npm/indexof@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/indexof/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/indexof/package.json"
              }
            ],
            "concludedValue": "node_modules/indexof/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "ieee754",
      "version": "1.1.13",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.1.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/ieee754.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ieee754/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ieee754/package.json"
              }
            ],
            "concludedValue": "node_modules/ieee754/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexander Shtuchkin <ashtuchkin@gmail.com>"
        }
      ],
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.23",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.23",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ashtuchkin/iconv-lite"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ashtuchkin/iconv-lite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/iconv-lite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/iconv-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/iconv-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evan Hahn <me@evanhahn.com> (https://evanhahn.com)"
        }
      ],
      "group": "",
      "name": "humanize-duration",
      "version": "3.16.0",
      "description": "Convert millisecond durations to English and many other languages.",
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/humanize-duration@3.16.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/EvanHahn/HumanizeDuration.js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/EvanHahn/HumanizeDuration.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/humanize-duration@3.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/humanize-duration/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/humanize-duration/package.json"
              }
            ],
            "concludedValue": "node_modules/humanize-duration/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "https-browserify",
      "version": "0.0.1",
      "description": "https module compatability for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/https-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/https-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/https-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/https-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/https-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joyent"
        },
        {
          "name": " Inc"
        }
      ],
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "description": "Reference implementation of Joyent's HTTP Signature scheme.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/joyent/node-http-signature/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/joyent/node-http-signature.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-signature/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-signature/package.json"
              }
            ],
            "concludedValue": "node_modules/http-signature/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Charlie Robbins <charlie.robbins@gmail.com>"
        }
      ],
      "group": "",
      "name": "http-proxy",
      "version": "1.17.0",
      "description": "HTTP proxying for the masses",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy@1.17.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejitsu/node-http-proxy.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-proxy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-proxy/package.json"
              }
            ],
            "concludedValue": "node_modules/http-proxy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "http-errors",
      "version": "1.6.3",
      "description": "Create HTTP error objects",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.3",
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/http-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kornel Lesiński <kornel@geekhood.net> (https://kornel.ski/)"
        }
      ],
      "group": "",
      "name": "http-cache-semantics",
      "version": "3.8.1",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-cache-semantics@3.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/http-cache-semantics@3.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-cache-semantics/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-cache-semantics/package.json"
              }
            ],
            "concludedValue": "node_modules/http-cache-semantics/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andres Suarez <zertosh@gmail.com>"
        }
      ],
      "group": "",
      "name": "htmlescape",
      "version": "1.1.1",
      "description": "Properly escape JSON for usage as an object literal inside of a `<script>` tag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/htmlescape@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zertosh/htmlescape"
        },
        {
          "type": "vcs",
          "url": "git://github.com/zertosh/htmlescape.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlescape@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/htmlescape/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/htmlescape/package.json"
              }
            ],
            "concludedValue": "node_modules/htmlescape/package.json"
          }
        ]
      },
      "tags": [
        "escape",
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "hmac-drbg",
      "version": "1.0.1",
      "description": "Deterministic random bit generator (hmac)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hmac-drbg@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/hmac-drbg#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/indutny/hmac-drbg.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hmac-drbg@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hmac-drbg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hmac-drbg/package.json"
              }
            ],
            "concludedValue": "node_modules/hmac-drbg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ivan Sagalaev <maniac@softwaremaniacs.org>"
        }
      ],
      "group": "",
      "name": "highlight.js",
      "version": "9.12.0",
      "description": "Syntax highlighting with language autodetection.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/highlight.js@9.12.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://highlightjs.org/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isagalaev/highlight.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/highlight.js@9.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/highlight.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/highlight.js/package.json"
              }
            ],
            "concludedValue": "node_modules/highlight.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Don Park <donpark@docuverse.com> (http://blog.docuverse.com)"
        }
      ],
      "group": "",
      "name": "hbs",
      "version": "4.0.6",
      "description": "Express.js template engine plugin for Handlebars",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hbs@4.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/hbs@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hbs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hbs/package.json"
              }
            ],
            "concludedValue": "node_modules/hbs/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "hash.js",
      "version": "1.1.7",
      "description": "Various hash functions that could be run by both browser and node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash.js@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/hash.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash.js@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hash.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hash.js/package.json"
              }
            ],
            "concludedValue": "node_modules/hash.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kirill Fomichev <fanatid@ya.ru> (https://github.com/fanatid)"
        }
      ],
      "group": "",
      "name": "hash-base",
      "version": "3.1.0",
      "description": "abstract base class for hash-streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash-base@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/hash-base"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/hash-base.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash-base@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hash-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hash-base/package.json"
              }
            ],
            "concludedValue": "node_modules/hash-base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "has-values",
      "version": "1.0.0",
      "description": "Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-values@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/has-values"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-values/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-values/package.json"
              }
            ],
            "concludedValue": "node_modules/has-values/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "description": "Get the native type of a value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/kind-of"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-values/node_modules/kind-of/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-values/node_modules/kind-of/package.json"
              }
            ],
            "concludedValue": "node_modules/has-values/node_modules/kind-of/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "has-value",
      "version": "1.0.0",
      "description": "Returns true if a value exists, false if empty. Works with deeply nested values using object paths.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-value@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/has-value"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-value/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-value/package.json"
              }
            ],
            "concludedValue": "node_modules/has-value/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Graham Fairweather <xotic750@gmail.com>"
        }
      ],
      "group": "",
      "name": "has-to-string-tag-x",
      "version": "1.4.1",
      "description": "Tests if ES6 @@toStringTag is supported.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-to-string-tag-x@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Xotic750/has-to-string-tag-x"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Xotic750/has-to-string-tag-x.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-to-string-tag-x@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-to-string-tag-x/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-to-string-tag-x/package.json"
              }
            ],
            "concludedValue": "node_modules/has-to-string-tag-x/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-symbols",
      "version": "1.0.1",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/has-symbols.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-symbols/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-symbols/package.json"
              }
            ],
            "concludedValue": "node_modules/has-symbols/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Graham Fairweather <xotic750@gmail.com>"
        }
      ],
      "group": "",
      "name": "has-symbol-support-x",
      "version": "1.4.2",
      "description": "Tests if ES6 Symbol is supported.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-symbol-support-x@1.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Xotic750/has-symbol-support-x"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Xotic750/has-symbol-support-x.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbol-support-x@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-symbol-support-x/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-symbol-support-x/package.json"
              }
            ],
            "concludedValue": "node_modules/has-symbol-support-x/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "description": "Check if argv has a specific flag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "description": "Check if a string has ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/has-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Thiago de Arruda <tpadilha84@gmail.com>"
        }
      ],
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "description": "Object.prototype.hasOwnProperty.call shortcut",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tarruda/has"
        },
        {
          "type": "vcs",
          "url": "git://github.com/tarruda/has.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has/package.json"
              }
            ],
            "concludedValue": "node_modules/has/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ahmad Nassri <ahmad@ahmadnassri.com> (https://www.ahmadnassri.com/)"
        }
      ],
      "group": "",
      "name": "har-validator",
      "version": "5.1.3",
      "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ahmadnassri/node-har-validator"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ahmadnassri/node-har-validator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/har-validator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/har-validator/package.json"
              }
            ],
            "concludedValue": "node_modules/har-validator/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Ahmad Nassri <ahmad@ahmadnassri.com> (https://www.ahmadnassri.com/)"
        }
      ],
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "description": "JSON Schema for HTTP Archive (HAR)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ahmadnassri/har-schema"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ahmadnassri/har-schema.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/har-schema/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/har-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/har-schema/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Yehuda Katz"
        }
      ],
      "group": "",
      "name": "handlebars",
      "version": "4.3.5",
      "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.3.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.handlebarsjs.com/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/wycats/handlebars.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/handlebars/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/handlebars/package.json"
              }
            ],
            "concludedValue": "node_modules/handlebars/package.json"
          }
        ]
      },
      "tags": [
        "templates"
      ]
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/handlebars/node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/handlebars/node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/handlebars/node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.4",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-graceful-fs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graceful-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graceful-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/graceful-fs/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "8.3.2",
      "description": "Simplified HTTP requests",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/got@8.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/got@8.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/got/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/got/package.json"
              }
            ],
            "concludedValue": "node_modules/got/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chinedu Francis Nwafili"
        }
      ],
      "group": "",
      "name": "globs-to-files",
      "version": "1.0.0",
      "description": "Expand multiple globs into file paths",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globs-to-files@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chinedufn/globs-to-files"
        },
        {
          "type": "vcs",
          "url": "http://github.com/chinedufn/globs-to-files.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globs-to-files@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globs-to-files/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globs-to-files/package.json"
              }
            ],
            "concludedValue": "node_modules/globs-to-files/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "5.0.15",
      "description": "a little globber",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@5.0.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globs-to-files/node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globs-to-files/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/globs-to-files/node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "9.18.0",
      "description": "Global identifiers from different JavaScript environments",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@9.18.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@9.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "global",
      "version": "4.3.2",
      "description": "Require global variables",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/global@4.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/global"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/global/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/global/package.json"
              }
            ],
            "concludedValue": "node_modules/global/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "process",
      "version": "0.5.2",
      "description": "process information for node.js and browsers",
      "purl": "pkg:npm/process@0.5.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-process.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/global/node_modules/process/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/global/node_modules/process/package.json"
              }
            ],
            "concludedValue": "node_modules/global/node_modules/process/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Elan Shanker (https://github.com/es128)"
        }
      ],
      "group": "",
      "name": "glob-parent",
      "version": "3.1.0",
      "description": "Strips glob magic from a string to provide the parent directory path",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es128/glob-parent"
        },
        {
          "type": "vcs",
          "url": "https://github.com/es128/glob-parent"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob-parent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob-parent/package.json"
              }
            ],
            "concludedValue": "node_modules/glob-parent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-glob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob-parent/node_modules/is-glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob-parent/node_modules/is-glob/package.json"
              }
            ],
            "concludedValue": "node_modules/glob-parent/node_modules/is-glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "7.1.6",
      "description": "a little globber",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alex Wilson <alex.wilson@joyent.com>"
        }
      ],
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "description": "getpass for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/arekinath/node-getpass.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/getpass/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/getpass/package.json"
              }
            ],
            "concludedValue": "node_modules/getpass/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "get-value",
      "version": "2.0.6",
      "description": "Use property paths (`a.b.c`) to get a nested value from an object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-value@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/get-value"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-value@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-value/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-value/package.json"
              }
            ],
            "concludedValue": "node_modules/get-value/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "get-stream",
      "version": "3.0.0",
      "description": "Get a stream as a string, buffer, or array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-stream@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/get-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Renée Kooi <renee@kooi.me>"
        }
      ],
      "group": "",
      "name": "get-assigned-identifiers",
      "version": "1.2.0",
      "description": "get a list of identifiers that are initialised by a JavaScript AST node.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-assigned-identifiers@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/get-assigned-identifiers"
        },
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/get-assigned-identifiers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-assigned-identifiers@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-assigned-identifiers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-assigned-identifiers/package.json"
              }
            ],
            "concludedValue": "node_modules/get-assigned-identifiers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "functions-have-names",
      "version": "1.2.1",
      "description": "Does this JS environment support the `name` property on functions?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/functions-have-names@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/functions-have-names#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/functions-have-names.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functions-have-names@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/functions-have-names/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/functions-have-names/package.json"
              }
            ],
            "concludedValue": "node_modules/functions-have-names/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "description": "Implementation of Function.prototype.bind",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/function-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/function-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/function-bind/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/fs.realpath.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fs.realpath/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs.realpath/package.json"
              }
            ],
            "concludedValue": "node_modules/fs.realpath/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "JP Richardson <jprichardson@gmail.com>"
        }
      ],
      "group": "",
      "name": "fs-extra",
      "version": "4.0.3",
      "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-extra@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jprichardson/node-fs-extra"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jprichardson/node-fs-extra"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fs-extra/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs-extra/package.json"
              }
            ],
            "concludedValue": "node_modules/fs-extra/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "fs-constants",
      "version": "1.0.0",
      "description": "Require constants across node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-constants@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fs-constants"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fs-constants.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-constants@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fs-constants/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs-constants/package.json"
              }
            ],
            "concludedValue": "node_modules/fs-constants/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Hugh Kennedy <hughskennedy@gmail.com> (http://hughsk.io/)"
        }
      ],
      "group": "",
      "name": "from2",
      "version": "2.3.0",
      "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/from2@2.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hughsk/from2"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hughsk/from2"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/from2@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/from2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/from2/package.json"
              }
            ],
            "concludedValue": "node_modules/from2/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)"
        }
      ],
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "description": "HTTP response freshness testing",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fresh/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fresh/package.json"
              }
            ],
            "concludedValue": "node_modules/fresh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "fragment-cache",
      "version": "0.2.1",
      "description": "A cache for managing namespaced sub-caches",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fragment-cache@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/fragment-cache"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fragment-cache@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fragment-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fragment-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/fragment-cache/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.2",
      "description": "Parse HTTP X-Forwarded-For header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/forwarded/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/forwarded/package.json"
              }
            ],
            "concludedValue": "node_modules/forwarded/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "form-data",
      "version": "2.3.3",
      "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/form-data/form-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/form-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/form-data/package.json"
              }
            ],
            "concludedValue": "node_modules/form-data/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/forever-agent"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/forever-agent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/forever-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/forever-agent/package.json"
          }
        ]
      },
      "tags": [
        "socket"
      ]
    },
    {
      "authors": [
        {
          "name": "AJ ONeal <coolaj86@gmail.com> (http://coolaj86.com/)"
        }
      ],
      "group": "",
      "name": "foreachasync",
      "version": "3.0.0",
      "description": "A node- and browser-ready async counterpart of Array.prototype.forEach",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreachasync@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/FuturesJS/forEachAsync"
        },
        {
          "type": "vcs",
          "url": "git://github.com/FuturesJS/forEachAsync.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreachasync@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/foreachasync/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/foreachasync/package.json"
              }
            ],
            "concludedValue": "node_modules/foreachasync/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Florian Margaine <florian@margaine.com>"
        }
      ],
      "group": "",
      "name": "foreach-shim",
      "version": "0.1.1",
      "description": "Shims Array.prototype.forEach in legacy browsers.",
      "purl": "pkg:npm/foreach-shim@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Ralt/foreach-shim"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreach-shim@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/foreach-shim/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/foreach-shim/package.json"
              }
            ],
            "concludedValue": "node_modules/foreach-shim/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Manuel Stofer <manuel@takimata.ch>"
        }
      ],
      "group": "",
      "name": "foreach",
      "version": "2.0.5",
      "description": "foreach component + npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreach@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/manuelstofer/foreach"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreach@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/foreach/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/foreach/package.json"
              }
            ],
            "concludedValue": "node_modules/foreach/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/for-in"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/for-in/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/for-in/package.json"
              }
            ],
            "concludedValue": "node_modules/for-in/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "for-each",
      "version": "0.3.3",
      "description": "A better forEach",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-each@0.3.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/for-each"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/for-each/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/for-each/package.json"
              }
            ],
            "concludedValue": "node_modules/for-each/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ruben Verborgh <ruben@verborgh.org> (https://ruben.verborgh.org/)"
        }
      ],
      "group": "",
      "name": "follow-redirects",
      "version": "1.12.1",
      "description": "HTTP and HTTPS modules that follow redirects.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/follow-redirects@1.12.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/follow-redirects/follow-redirects"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/follow-redirects@1.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/follow-redirects/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/follow-redirects/package.json"
              }
            ],
            "concludedValue": "node_modules/follow-redirects/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Saad Tazi"
        }
      ],
      "group": "",
      "name": "firefox-profile",
      "version": "1.2.0",
      "description": "firefox profile for selenium WebDriverJs, admc/wd or any other node selenium driver that supports capabilities",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/firefox-profile@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/saadtazi/firefox-profile-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/firefox-profile@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/firefox-profile/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/firefox-profile/package.json"
              }
            ],
            "concludedValue": "node_modules/firefox-profile/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Gourley"
        }
      ],
      "group": "",
      "name": "find-nearest-file",
      "version": "1.1.0",
      "description": "Find the nearest file with a given name",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-nearest-file@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bengourley/find-nearest-file"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-nearest-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-nearest-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-nearest-file/package.json"
              }
            ],
            "concludedValue": "node_modules/find-nearest-file/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "finalhandler",
      "version": "1.1.1",
      "description": "Node.js final http responder",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/finalhandler@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/finalhandler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/finalhandler/package.json"
              }
            ],
            "concludedValue": "node_modules/finalhandler/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "fill-range",
      "version": "4.0.0",
      "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fill-range@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/fill-range"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fill-range/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fill-range/package.json"
              }
            ],
            "concludedValue": "node_modules/fill-range/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "David Mark Clements"
        }
      ],
      "group": "",
      "name": "fast-safe-stringify",
      "version": "2.0.7",
      "description": "Safely and quickly serialize JavaScript objects",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-safe-stringify@2.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-safe-stringify@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-safe-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-safe-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-safe-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-json-stable-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-json-stable-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "description": "Fast deep equal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-deep-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-deep-equal/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "description": "extended POSIX-style sprintf",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/davepacheco/node-extsprintf.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/extsprintf/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/extsprintf/package.json"
              }
            ],
            "concludedValue": "node_modules/extsprintf/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "extglob",
      "version": "2.0.4",
      "description": "Extended glob support for JavaScript. Adds (almost) the expressive power of regular expressions to glob patterns.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extglob@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/extglob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/extglob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/extglob/package.json"
              }
            ],
            "concludedValue": "node_modules/extglob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "extend-shallow",
      "version": "2.0.1",
      "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extend-shallow@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/extend-shallow"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/extend-shallow/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/extend-shallow/package.json"
              }
            ],
            "concludedValue": "node_modules/extend-shallow/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Stefan Thomas <justmoon@members.fsf.org> (http://www.justmoon.net)"
        }
      ],
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "description": "Port of jQuery.extend for node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/justmoon/node-extend.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/extend/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/extend/package.json"
              }
            ],
            "concludedValue": "node_modules/extend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eric Ferraiuolo <eferraiuolo@gmail.com> (http://ericf.me/)"
        }
      ],
      "group": "",
      "name": "express-state",
      "version": "1.4.0",
      "description": "Share server-side state with the client-side of an Express app via JavaScript.",
      "purl": "pkg:npm/express-state@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yahoo/express-state"
        },
        {
          "type": "vcs",
          "url": "git://github.com/yahoo/express-state.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express-state@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/express-state/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/express-state/package.json"
              }
            ],
            "concludedValue": "node_modules/express-state/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "express",
      "version": "4.16.4",
      "description": "Fast, unopinionated, minimalist web framework",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/express@4.16.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://expressjs.com/"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.16.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/express/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/express/package.json"
              }
            ],
            "concludedValue": "node_modules/express/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "expand-brackets",
      "version": "2.1.4",
      "description": "Expand POSIX bracket expressions (character classes) in glob patterns.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-brackets@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/expand-brackets"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/expand-brackets/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/expand-brackets/package.json"
              }
            ],
            "concludedValue": "node_modules/expand-brackets/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "evp_bytestokey",
      "version": "1.0.3",
      "description": "The insecure key derivation algorithm from OpenSSL",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/evp_bytestokey@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/evp_bytestokey@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/evp_bytestokey/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/evp_bytestokey/package.json"
              }
            ],
            "concludedValue": "node_modules/evp_bytestokey/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "events-to-array",
      "version": "1.1.2",
      "description": "Put a bunch of emitted events in an array, for testing.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events-to-array@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/events-to-array"
        },
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/events-to-array"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-to-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/events-to-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/events-to-array/package.json"
              }
            ],
            "concludedValue": "node_modules/events-to-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)"
        }
      ],
      "group": "",
      "name": "events",
      "version": "1.1.1",
      "description": "Node's event emitter for all engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/events.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/events/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/events/package.json"
              }
            ],
            "concludedValue": "node_modules/events/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Arnout Kazemier"
        }
      ],
      "group": "",
      "name": "eventemitter3",
      "version": "3.1.2",
      "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eventemitter3@3.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/primus/eventemitter3.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eventemitter3/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eventemitter3/package.json"
              }
            ],
            "concludedValue": "node_modules/eventemitter3/package.json"
          }
        ]
      },
      "tags": [
        "performance"
      ]
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "description": "Create simple HTTP ETags",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/etag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/etag/package.json"
              }
            ],
            "concludedValue": "node_modules/etag/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "description": "utility box for ECMAScript language tools",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esutils"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/esutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esutils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esutils/package.json"
              }
            ],
            "concludedValue": "node_modules/esutils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ariya Hidayat <ariya.hidayat@gmail.com>"
        }
      ],
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://esprima.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jquery/esprima.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esprima/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esprima/package.json"
              }
            ],
            "concludedValue": "node_modules/esprima/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "description": "Escape RegExp special characters",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "description": "Escape string for use in HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-html/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-html/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-html/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-to-primitive",
      "version": "1.2.1",
      "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/es-to-primitive.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-to-primitive/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-to-primitive/package.json"
              }
            ],
            "concludedValue": "node_modules/es-to-primitive/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-get-iterator",
      "version": "1.1.0",
      "description": "Get an iterator for any JS language value. Works robustly across all environments, all versions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-get-iterator@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-get-iterator#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-get-iterator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-get-iterator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-get-iterator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-get-iterator/package.json"
              }
            ],
            "concludedValue": "node_modules/es-get-iterator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "es-abstract",
      "version": "1.17.6",
      "description": "ECMAScript spec abstract operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.17.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/es-abstract.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.17.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-abstract/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-abstract/package.json"
              }
            ],
            "concludedValue": "node_modules/es-abstract/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.0.6",
      "description": "Extract meaning from JS Errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.0.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.stacktracejs.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/stacktracejs/error-stack-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/error-stack-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/error-stack-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/error-stack-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/end-of-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mafintosh/end-of-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/end-of-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/end-of-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/end-of-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/encodeurl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/encodeurl/package.json"
              }
            ],
            "concludedValue": "node_modules/encodeurl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "elliptic",
      "version": "6.5.3",
      "description": "EC cryptography",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/elliptic@6.5.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/elliptic"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/elliptic@6.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/elliptic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/elliptic/package.json"
              }
            ],
            "concludedValue": "node_modules/elliptic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "description": "return the first event in a set of ee/event pairs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ee-first/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ee-first/package.json"
              }
            ],
            "concludedValue": "node_modules/ee-first/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Jeremie Miller <jeremie@jabber.org> (http://jeremie.com/)"
        }
      ],
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "description": "ECC JS code based on JSBN",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/quartzjer/ecc-jsbn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/quartzjer/ecc-jsbn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ecc-jsbn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ecc-jsbn/package.json"
              }
            ],
            "concludedValue": "node_modules/ecc-jsbn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)"
        }
      ],
      "group": "",
      "name": "duplexer3",
      "version": "0.1.4",
      "description": "Like duplexer but using streams3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer3@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/duplexer3@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/duplexer3/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/duplexer3/package.json"
              }
            ],
            "concludedValue": "node_modules/duplexer3/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)"
        }
      ],
      "group": "",
      "name": "duplexer2",
      "version": "0.1.4",
      "description": "Like duplexer but using streams3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/duplexer2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/duplexer2/package.json"
              }
            ],
            "concludedValue": "node_modules/duplexer2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bradleymeck"
        }
      ],
      "group": "",
      "name": "dotignore",
      "version": "0.1.2",
      "description": "ignorefile/includefile matching .gitignore spec",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dotignore@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/bmeck/dotignore"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dotignore@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dotignore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dotignore/package.json"
              }
            ],
            "concludedValue": "node_modules/dotignore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)"
        }
      ],
      "group": "",
      "name": "domain-browser",
      "version": "1.1.7",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser"
        },
        {
          "type": "vcs",
          "url": "http://github.com/bevry/domain-browser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/domain-browser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/domain-browser/package.json"
              }
            ],
            "concludedValue": "node_modules/domain-browser/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "dom-walk",
      "version": "0.1.2",
      "description": "iteratively walk a DOM node",
      "purl": "pkg:npm/dom-walk@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/dom-walk"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-walk@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dom-walk/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dom-walk/package.json"
              }
            ],
            "concludedValue": "node_modules/dom-walk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf"
        }
      ],
      "group": "",
      "name": "diffie-hellman",
      "version": "5.0.3",
      "description": "pure js diffie-hellman",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diffie-hellman@5.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/diffie-hellman"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/diffie-hellman.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diffie-hellman@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/diffie-hellman/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/diffie-hellman/package.json"
              }
            ],
            "concludedValue": "node_modules/diffie-hellman/package.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "detective",
      "version": "4.7.1",
      "description": "find all require() calls by walking the AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detective@4.7.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/browserify/detective.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detective@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detective/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detective/package.json"
              }
            ],
            "concludedValue": "node_modules/detective/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "5.7.4",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@5.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@5.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detective/node_modules/acorn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detective/node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/detective/node_modules/acorn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "detect-indent",
      "version": "4.0.0",
      "description": "Detect the indentation of code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-indent@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/detect-indent@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detect-indent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detect-indent/package.json"
              }
            ],
            "concludedValue": "node_modules/detect-indent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "destroy",
      "version": "1.0.4",
      "description": "destroy a stream if possible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/destroy@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/destroy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/destroy/package.json"
              }
            ],
            "concludedValue": "node_modules/destroy/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "des.js",
      "version": "1.0.1",
      "description": "DES implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/des.js@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/des.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/indutny/des.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/des.js@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/des.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/des.js/package.json"
              }
            ],
            "concludedValue": "node_modules/des.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "deps-sort",
      "version": "2.0.1",
      "description": "sort module-deps output for deterministic browserify bundles",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deps-sort@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/deps-sort"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/deps-sort.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deps-sort@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deps-sort/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deps-sort/package.json"
              }
            ],
            "concludedValue": "node_modules/deps-sort/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "depd",
      "version": "1.1.2",
      "description": "Deprecate all the things",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/depd@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/depd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/depd/package.json"
              }
            ],
            "concludedValue": "node_modules/depd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "description": "Buffers events from a stream until you are ready to handle them.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-delayed-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-delayed-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/delayed-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/delayed-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/delayed-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "defined",
      "version": "1.0.0",
      "description": "return the first argument that is `!== undefined`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/defined@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/defined"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/defined.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defined@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/defined/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/defined/package.json"
              }
            ],
            "concludedValue": "node_modules/defined/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "define-property",
      "version": "2.0.2",
      "description": "Define a non-enumerable property on an object. Uses Reflect.defineProperty when available, otherwise Object.defineProperty.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-property@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/define-property"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/define-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/define-property/package.json"
              }
            ],
            "concludedValue": "node_modules/define-property/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "define-properties",
      "version": "1.1.3",
      "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/define-properties.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/define-properties/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/define-properties/package.json"
              }
            ],
            "concludedValue": "node_modules/define-properties/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "deep-equal",
      "version": "2.0.3",
      "description": "node's assert.deepEqual algorithm",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-equal@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/inspect-js/node-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-equal/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-response",
      "version": "3.3.0",
      "description": "Decompress a HTTP response if needed",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decompress-response@3.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/decompress-response@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decompress-response/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decompress-response/package.json"
              }
            ],
            "concludedValue": "node_modules/decompress-response/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sam Verschueren <sam.verschueren@gmail.com> (github.com/SamVerschueren)"
        }
      ],
      "group": "",
      "name": "decode-uri-component",
      "version": "0.2.0",
      "description": "A better decodeURIComponent",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decode-uri-component@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/decode-uri-component@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decode-uri-component/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decode-uri-component/package.json"
              }
            ],
            "concludedValue": "node_modules/decode-uri-component/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.1.1",
      "description": "small debugging utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Trent Mick <trentm@gmail.com> (http://trentm.com)"
        }
      ],
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "description": "A light, featureful and explicit option parsing library.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/trentm/node-dashdash.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dashdash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dashdash/package.json"
              }
            ],
            "concludedValue": "node_modules/dashdash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Renée Kooi <renee@kooi.me>"
        }
      ],
      "group": "",
      "name": "dash-ast",
      "version": "1.0.0",
      "description": "walk an AST, quickly",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dash-ast@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/dash-ast"
        },
        {
          "type": "vcs",
          "url": "https://github.com/goto-bus-stop/dash-ast.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dash-ast@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dash-ast/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dash-ast/package.json"
              }
            ],
            "concludedValue": "node_modules/dash-ast/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "crypto-browserify",
      "version": "3.12.0",
      "description": "implementation of crypto for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.12.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/crypto-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/crypto-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/crypto-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crypto-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/crypto-browserify/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "create-hmac",
      "version": "1.1.7",
      "description": "node style hmacs in the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createHmac"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createHmac.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hmac@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-hmac/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-hmac/package.json"
              }
            ],
            "concludedValue": "node_modules/create-hmac/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hash",
      "version": "1.2.0",
      "description": "create hashes for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hash@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createHash"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hash@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-hash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-hash/package.json"
              }
            ],
            "concludedValue": "node_modules/create-hash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf"
        }
      ],
      "group": "",
      "name": "create-ecdh",
      "version": "4.0.3",
      "description": "createECDH but browserifiable",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-ecdh@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createECDH"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/createECDH.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-ecdh@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-ecdh/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-ecdh/package.json"
              }
            ],
            "concludedValue": "node_modules/create-ecdh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "crc32-stream",
      "version": "2.0.0",
      "description": "a streaming CRC32 checksumer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crc32-stream@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-crc32-stream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-crc32-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc32-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/crc32-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crc32-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/crc32-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alex Gorbatchev (https://github.com/alexgorbatchev)"
        }
      ],
      "group": "",
      "name": "crc",
      "version": "3.8.0",
      "description": "Module for calculating Cyclic Redundancy Check (CRC) for Node.js and the Browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crc@3.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/alexgorbatchev/node-crc"
        },
        {
          "type": "vcs",
          "url": "git://github.com/alexgorbatchev/node-crc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc@3.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/crc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crc/package.json"
              }
            ],
            "concludedValue": "node_modules/crc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/core-util-is"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-util-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-util-is/package.json"
              }
            ],
            "concludedValue": "node_modules/core-util-is/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.6.11",
      "description": "Standard library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@2.6.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zloirock/core-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.6.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-js/package.json"
              }
            ],
            "concludedValue": "node_modules/core-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "copy-descriptor",
      "version": "0.1.1",
      "description": "Copy a descriptor from object A to object B",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/copy-descriptor@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/copy-descriptor"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-descriptor@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/copy-descriptor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/copy-descriptor/package.json"
              }
            ],
            "concludedValue": "node_modules/copy-descriptor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@learnboost.com>"
        }
      ],
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "description": "Sign and unsign cookies",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/node-cookie-signature.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookie-signature/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookie-signature/package.json"
              }
            ],
            "concludedValue": "node_modules/cookie-signature/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "cookie",
      "version": "0.3.1",
      "description": "HTTP server cookie parsing and serialization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie@0.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookie/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookie/package.json"
              }
            ],
            "concludedValue": "node_modules/cookie/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "1.6.0",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Douglas Christopher Wilson <doug@somethingdoug.com>"
        }
      ],
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "description": "Create and parse HTTP Content-Type header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/content-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/content-type/package.json"
              }
            ],
            "concludedValue": "node_modules/content-type/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.2",
      "description": "Create and parse Content-Disposition header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/content-disposition/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/content-disposition/package.json"
              }
            ],
            "concludedValue": "node_modules/content-disposition/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <julian@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "constants-browserify",
      "version": "1.0.0",
      "description": "node's constants module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/constants-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/constants-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constants-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/constants-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/constants-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/constants-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "console-browserify",
      "version": "1.2.0",
      "description": "Emulate console for all the browsers",
      "purl": "pkg:npm/console-browserify@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/console-browserify"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/console-browserify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/console-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/console-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Max Ogden <max@maxogden.com>"
        }
      ],
      "group": "",
      "name": "concat-stream",
      "version": "1.5.2",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.5.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/maxogden/concat-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-stream/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "stream"
      ]
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.0.6",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-stream/node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-stream/node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-stream/node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "1.0.7",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-stream/node_modules/process-nextick-args/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-stream/node_modules/process-nextick-args/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-stream/node_modules/process-nextick-args/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "description": "concatenative mapdashery",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-concat-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-map/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-map/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.7.4",
      "description": "Node.js compression middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compression@1.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/compression/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/compression/package.json"
              }
            ],
            "concludedValue": "node_modules/compression/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.18",
      "description": "Compressible Content-Type / mime checking",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compressible@2.0.18",
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/compressible/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/compressible/package.json"
              }
            ],
            "concludedValue": "node_modules/compressible/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "compress-commons",
      "version": "1.2.2",
      "description": "a library that defines a common interface for working with archive formats within node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compress-commons@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-compress-commons"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-compress-commons.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compress-commons@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/compress-commons/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/compress-commons/package.json"
              }
            ],
            "concludedValue": "node_modules/compress-commons/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.3.0",
      "description": "Event emitter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/component-emitter@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/component/emitter.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/component-emitter/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/component-emitter/package.json"
              }
            ],
            "concludedValue": "node_modules/component-emitter/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "2.19.0",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.19.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tj/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/commander/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/commander/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "description": "A stream that emits multiple other streams one after another.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-combined-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-combined-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/combined-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/combined-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/combined-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "combine-source-map",
      "version": "0.8.0",
      "description": "Add source maps of multiple files, offset them and then combine them into one source map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/combine-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/combine-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combine-source-map@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/combine-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/combine-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/combine-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "1.1.3",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/combine-source-map/node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/combine-source-map/node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/combine-source-map/node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "description": "A list of color names and its values",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dfcreative/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "description": "Plain color conversion functions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-convert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "collection-visit",
      "version": "1.0.0",
      "description": "Visit a method over the items in an object, or map visit over the objects in an array.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/collection-visit@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/collection-visit"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collection-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/collection-visit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/collection-visit/package.json"
              }
            ],
            "concludedValue": "node_modules/collection-visit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)"
        }
      ],
      "group": "",
      "name": "clone-response",
      "version": "1.0.2",
      "description": "Clone a Node.js HTTP response stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/clone-response@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lukechilds/clone-response"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lukechilds/clone-response.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-response@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/clone-response/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/clone-response/package.json"
              }
            ],
            "concludedValue": "node_modules/clone-response/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "class-utils",
      "version": "0.3.6",
      "description": "Utils for working with JavaScript classes and prototype methods.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/class-utils@0.3.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/class-utils"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/class-utils@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/class-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/class-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/class-utils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "cipher-base",
      "version": "1.0.4",
      "description": "abstract base class for crypto-streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cipher-base@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/cipher-base#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/crypto-browserify/cipher-base.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cipher-base@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cipher-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cipher-base/package.json"
              }
            ],
            "concludedValue": "node_modules/cipher-base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com)"
        },
        {
          "name": " Elan Shanker"
        }
      ],
      "group": "",
      "name": "chokidar",
      "version": "2.1.8",
      "description": "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@2.1.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/chokidar"
        },
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/chokidar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@2.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chokidar/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chokidar/package.json"
              }
            ],
            "concludedValue": "node_modules/chokidar/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "description": "Terminal string styling done right",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com>"
        }
      ],
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "description": "Caseless object set/get/has, very useful when working with HTTP headers.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/caseless"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/caseless/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/caseless/package.json"
              }
            ],
            "concludedValue": "node_modules/caseless/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cached-path-relative",
      "version": "1.0.2",
      "description": "Memoize the results of the path.relative function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cached-path-relative@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/cached-path-relative@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cached-path-relative/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cached-path-relative/package.json"
              }
            ],
            "concludedValue": "node_modules/cached-path-relative/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)"
        }
      ],
      "group": "",
      "name": "cacheable-request",
      "version": "2.1.4",
      "description": "Wrap native HTTP requests with RFC compliant cache support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cacheable-request@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lukechilds/cacheable-request"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lukechilds/cacheable-request.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacheable-request@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cacheable-request/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cacheable-request/package.json"
              }
            ],
            "concludedValue": "node_modules/cacheable-request/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.0",
      "description": "Lowercase the keys of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cacheable-request/node_modules/lowercase-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cacheable-request/node_modules/lowercase-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/cacheable-request/node_modules/lowercase-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "cache-base",
      "version": "1.0.1",
      "description": "Basic object cache with `get`, `set`, `del`, and `has` methods for node.js/javascript projects.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cache-base@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/cache-base"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-base@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cache-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cache-base/package.json"
              }
            ],
            "concludedValue": "node_modules/cache-base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)"
        }
      ],
      "group": "",
      "name": "bytes",
      "version": "3.0.0",
      "description": "Utility to parse a string bytes to bytes and vice-versa",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bytes@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bytes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bytes/package.json"
              }
            ],
            "concludedValue": "node_modules/bytes/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Drucker <bvdrucker@gmail.com> (bendrucker.me)"
        }
      ],
      "group": "",
      "name": "builtin-status-codes",
      "version": "3.0.0",
      "description": "The map of HTTP status codes from the builtin http module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/builtin-status-codes@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/builtin-status-codes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/builtin-status-codes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/builtin-status-codes/package.json"
              }
            ],
            "concludedValue": "node_modules/builtin-status-codes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Cousens"
        }
      ],
      "group": "",
      "name": "buffer-xor",
      "version": "1.0.3",
      "description": "A simple module for bitwise-xor on buffers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-xor@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/buffer-xor"
        },
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/buffer-xor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-xor@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-xor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-xor/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-xor/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-from/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-from/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-fill",
      "version": "1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-fill@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-fill@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-fill/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-fill/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-fill/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Brian J. Brennan <brianloveswords@gmail.com>"
        }
      ],
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "description": "A pure javascript CRC32 algorithm that plays nice with binary data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/brianloveswords/buffer-crc32"
        },
        {
          "type": "vcs",
          "url": "git://github.com/brianloveswords/buffer-crc32.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-crc32/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-crc32/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-crc32/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "group": "",
      "name": "buffer-alloc-unsafe",
      "version": "1.1.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-alloc-unsafe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-alloc-unsafe/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-alloc-unsafe/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc",
      "version": "1.2.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-alloc@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-alloc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-alloc/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-alloc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "4.9.2",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@4.9.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@4.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Devon Govett <devongovett@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-zlib",
      "version": "0.1.4",
      "description": "Full zlib module for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/devongovett/browserify-zlib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-zlib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-zlib/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-zlib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-sign",
      "version": "4.2.0",
      "description": "adds node crypto signing for browsers",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-sign@4.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-sign.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-sign@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-sign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-sign/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-sign/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-rsa",
      "version": "4.0.1",
      "description": "RSA for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-rsa@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/browserify-rsa@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-rsa/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-rsa/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-rsa/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Devon Govett <devongovett@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-istanbul",
      "version": "3.0.1",
      "description": "A browserify transform for the istanbul code coverage tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-istanbul@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/devongovett/browserify-istanbul"
        },
        {
          "type": "vcs",
          "url": "git://github.com/devongovett/browserify-istanbul.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-istanbul@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-istanbul/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-istanbul/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-istanbul/package.json"
          }
        ]
      },
      "tags": [
        "test",
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-des",
      "version": "1.0.2",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-des@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-des#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/crypto-browserify/browserify-des.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-des@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-des/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-des/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-des/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Calvin Metcalf <calvin.metcalf@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-cipher",
      "version": "1.0.1",
      "description": "ciphers for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-cipher@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/browserify-cipher@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-cipher/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-cipher/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-cipher/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-aes",
      "version": "1.2.0",
      "description": "aes, for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/browserify-aes"
        },
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/browserify-aes.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-aes@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify-aes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify-aes/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify-aes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "browserify",
      "version": "13.3.0",
      "description": "browser-side require() the node way",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify@13.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify@13.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "evil-transform",
      "version": "1.0.0",
      "purl": "pkg:npm/evil-transform@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/evil-transform@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/test/ignore_transform_key/node_modules/evil-transform/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify/test/ignore_transform_key/node_modules/evil-transform/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify/test/ignore_transform_key/node_modules/evil-transform/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "a",
      "version": "1.0.0",
      "purl": "pkg:npm/a@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/a@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/test/ignore_transform_key/node_modules/a/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/test/ignore_browser_field/node_modules/a/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify/test/ignore_browser_field/node_modules/a/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify/test/ignore_browser_field/node_modules/a/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "b",
      "version": "1.0.0",
      "purl": "pkg:npm/b@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/b@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserify/test/ignore_browser_field/node_modules/b/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserify/test/ignore_browser_field/node_modules/b/package.json"
              }
            ],
            "concludedValue": "node_modules/browserify/test/ignore_browser_field/node_modules/b/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "browser-resolve",
      "version": "1.11.3",
      "description": "resolve which handles browser field support in package.json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.11.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-browser-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-resolve@1.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "1.1.7",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-resolve/node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-resolve/node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-resolve/node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep",
      "version": "1.2.3",
      "purl": "pkg:npm/deep@1.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/deep@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-resolve/node_modules/resolve/test/pathfilter/deep_ref/node_modules/deep/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "browser-pack",
      "version": "6.1.0",
      "description": "pack node-style source files from a json stream into a browser bundle",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-pack@6.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/browser-pack"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/browser-pack.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-pack@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browser-pack/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browser-pack/package.json"
              }
            ],
            "concludedValue": "node_modules/browser-pack/package.json"
          }
        ]
      },
      "tags": [
        "json",
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "brorand",
      "version": "1.1.0",
      "description": "Random number generator for browsers and node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brorand@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/brorand"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brorand@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brorand/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brorand/package.json"
              }
            ],
            "concludedValue": "node_modules/brorand/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "braces",
      "version": "2.3.2",
      "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/braces@2.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/braces"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/braces/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/braces/package.json"
              }
            ],
            "concludedValue": "node_modules/braces/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.18.3",
      "description": "Node.js body parsing middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/body-parser@1.18.3",
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.18.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/body-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/body-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/body-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny <fedor@indutny.com>"
        }
      ],
      "group": "",
      "name": "bn.js",
      "version": "5.1.2",
      "description": "Big number implementation in pure javascript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bn.js@5.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/bn.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bn.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bn.js/package.json"
              }
            ],
            "concludedValue": "node_modules/bn.js/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "1.2.2",
      "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bl@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/bl"
        },
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/bl.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bl/package.json"
              }
            ],
            "concludedValue": "node_modules/bl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "binary-extensions",
      "version": "1.13.1",
      "description": "List of binary file extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.13.1",
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/binary-extensions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/binary-extensions/package.json"
              }
            ],
            "concludedValue": "node_modules/binary-extensions/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/joyent/node-bcrypt-pbkdf.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bcrypt-pbkdf/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bcrypt-pbkdf/package.json"
              }
            ],
            "concludedValue": "node_modules/bcrypt-pbkdf/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "batch",
      "version": "0.6.1",
      "description": "Simple async batch with concurrency control and progress reporting.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/batch@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/batch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/batch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/batch/package.json"
              }
            ],
            "concludedValue": "node_modules/batch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "T. Jameson Little <t.jameson.little@gmail.com>"
        }
      ],
      "group": "",
      "name": "base64-js",
      "version": "1.3.1",
      "description": "Base64 encoding/decoding in pure JS",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/beatgammit/base64-js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/beatgammit/base64-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/base64-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/base64-js/package.json"
              }
            ],
            "concludedValue": "node_modules/base64-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "base",
      "version": "0.11.2",
      "description": "base is the foundation for creating modular, unit testable and highly pluggable node.js applications, starting with a handful of common methods, like `set`, `get`, `del` and `use`.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base@0.11.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/node-base/base"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/base/package.json"
              }
            ],
            "concludedValue": "node_modules/base/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/balanced-match/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babylon",
      "version": "6.18.0",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babylon@6.18.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babylon@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babylon/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babylon/package.json"
              }
            ],
            "concludedValue": "node_modules/babylon/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-types",
      "version": "6.26.0",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-types@6.26.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-types@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-types/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-traverse",
      "version": "6.26.0",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-traverse@6.26.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-traverse@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-traverse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-template",
      "version": "6.26.0",
      "description": "Generate an AST from a string template.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-template@6.26.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-template@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-template/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-template/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-template/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-runtime",
      "version": "6.26.0",
      "description": "babel selfContained runtime",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.26.0",
      "type": "library",
      "bom-ref": "pkg:npm/babel-runtime@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-runtime/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-runtime/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-runtime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-messages",
      "version": "6.23.0",
      "description": "Collection of debug messages used by Babel.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-messages@6.23.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-messages@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-messages/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-messages/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-messages/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-generator",
      "version": "6.26.1",
      "description": "Turns an AST into code.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-generator@6.26.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-generator@6.26.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-generator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-generator/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-generator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian McKenzie <sebmck@gmail.com>"
        }
      ],
      "group": "",
      "name": "babel-code-frame",
      "version": "6.26.0",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.26.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babeljs.io/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-code-frame/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-code-frame/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-code-frame/node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-code-frame/node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-code-frame/node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "description": "Terminal string styling done right. Much color.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-code-frame/node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-code-frame/node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-code-frame/node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/babel-code-frame/node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/babel-code-frame/node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/babel-code-frame/node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Michael Hart <michael.hart.au@gmail.com> (https://github.com/mhart)"
        }
      ],
      "group": "",
      "name": "aws4",
      "version": "1.10.0",
      "description": "Signs and prepares requests using AWS Signature Version 4",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aws4@1.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/aws4/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/aws4/package.json"
              }
            ],
            "concludedValue": "node_modules/aws4/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/aws-sign"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/aws-sign2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/aws-sign2/package.json"
              }
            ],
            "concludedValue": "node_modules/aws-sign2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "available-typed-arrays",
      "version": "1.0.2",
      "description": "Returns an array of Typed Array names that are available in the current environment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/available-typed-arrays#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/available-typed-arrays.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/available-typed-arrays@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/available-typed-arrays/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/available-typed-arrays/package.json"
              }
            ],
            "concludedValue": "node_modules/available-typed-arrays/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "AJ ONeal <coolaj86@gmail.com> (https://coolaj86.com)"
        }
      ],
      "group": "",
      "name": "atob",
      "version": "2.1.2",
      "description": "atob for Node.JS and Linux / Mac / Windows CLI (it's a one-liner)",
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/atob@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://git.coolaj86.com/coolaj86/atob.js.git"
        },
        {
          "type": "vcs",
          "url": "git://git.coolaj86.com/coolaj86/atob.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/atob/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/atob/package.json"
              }
            ],
            "concludedValue": "node_modules/atob/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "asyncreduce",
      "version": "0.1.4",
      "description": "Reduce an array of values via an asynchronous function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asyncreduce@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/asyncreduce"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/asyncreduce.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asyncreduce@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asyncreduce/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asyncreduce/package.json"
              }
            ],
            "concludedValue": "node_modules/asyncreduce/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alex Indigo <iam@alexindigo.com>"
        }
      ],
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "description": "Minimal async jobs utility library, with streams support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/alexindigo/asynckit#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/alexindigo/asynckit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asynckit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asynckit/package.json"
              }
            ],
            "concludedValue": "node_modules/asynckit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com/)"
        }
      ],
      "group": "",
      "name": "async-each",
      "version": "1.0.3",
      "description": "No-bullshit, ultra-simple, 35-lines-of-code async parallel forEach / map function for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-each@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/async-each/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async-each/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async-each/package.json"
              }
            ],
            "concludedValue": "node_modules/async-each/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Caolan McMahon"
        }
      ],
      "group": "",
      "name": "async",
      "version": "2.5.0",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async@2.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/caolan/async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async/package.json"
              }
            ],
            "concludedValue": "node_modules/async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "assign-symbols",
      "version": "1.0.0",
      "description": "Assign the enumerable es6 Symbol properties from an object (or objects) to the first object passed on the arguments. Can be used as a supplement to other extend, assign or merge methods as a polyfill for the Symbols part of the es6 Object.assign method.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assign-symbols@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/assign-symbols"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assign-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assign-symbols/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assign-symbols/package.json"
              }
            ],
            "concludedValue": "node_modules/assign-symbols/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mark Cavage <mcavage@gmail.com>"
        }
      ],
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "description": "Extra assertions on top of node's assert module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mcavage/node-assert-plus.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert-plus/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert-plus/package.json"
              }
            ],
            "concludedValue": "node_modules/assert-plus/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert",
      "version": "1.5.0",
      "description": "The node.js assert module, re-packaged for web browsers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert@1.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/commonjs-assert"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/commonjs-assert.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert/package.json"
              }
            ],
            "concludedValue": "node_modules/assert/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Joyent (http://www.joyent.com)"
        }
      ],
      "group": "",
      "name": "util",
      "version": "0.10.3",
      "description": "Node.JS util module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-util"
        },
        {
          "type": "vcs",
          "url": "git://github.com/defunctzombie/node-util"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert/node_modules/util/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert/node_modules/util/package.json"
              }
            ],
            "concludedValue": "node_modules/assert/node_modules/util/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/assert/node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/assert/node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/assert/node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fedor Indutny"
        }
      ],
      "group": "",
      "name": "asn1.js",
      "version": "4.10.1",
      "description": "ASN.1 encoder and decoder",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1.js@4.10.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/indutny/asn1.js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1.js@4.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asn1.js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asn1.js/package.json"
              }
            ],
            "concludedValue": "node_modules/asn1.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joyent (joyent.com)"
        }
      ],
      "group": "",
      "name": "asn1",
      "version": "0.2.4",
      "description": "Contains parsers and serializers for ASN.1 (currently BER only)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1@0.2.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/joyent/node-asn1.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/asn1/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/asn1/package.json"
              }
            ],
            "concludedValue": "node_modules/asn1/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "array-unique",
      "version": "0.3.2",
      "description": "Remove duplicate values from an array. Fastest ES5 implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-unique@0.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/array-unique"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-unique/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-unique/package.json"
              }
            ],
            "concludedValue": "node_modules/array-unique/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "description": "Create an array without duplicates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-uniq/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-uniq/package.json"
              }
            ],
            "concludedValue": "node_modules/array-uniq/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "array-map",
      "version": "0.0.0",
      "description": "`[].map(f)` for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-map@0.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/array-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/array-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-map@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-map/package.json"
              }
            ],
            "concludedValue": "node_modules/array-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Blake Embrey <hello@blakeembrey.com> (http://blakeembrey.me)"
        }
      ],
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "description": "Flatten an array of nested arrays into a single flat array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/blakeembrey/array-flatten"
        },
        {
          "type": "vcs",
          "url": "git://github.com/blakeembrey/array-flatten.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-flatten/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-flatten/package.json"
              }
            ],
            "concludedValue": "node_modules/array-flatten/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "array-filter",
      "version": "1.0.0",
      "description": "Array#filter for older browsers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-filter@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/array-filter"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/array-filter.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-filter@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-filter/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-filter/package.json"
              }
            ],
            "concludedValue": "node_modules/array-filter/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "arr-union",
      "version": "3.1.0",
      "description": "Combines a list of arrays, returning a single array with unique values, using strict equality for comparisons.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-union@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/arr-union"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-union@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/arr-union/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/arr-union/package.json"
              }
            ],
            "concludedValue": "node_modules/arr-union/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "description": "Recursively flatten an array or arrays.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/arr-flatten"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/arr-flatten/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/arr-flatten/package.json"
              }
            ],
            "concludedValue": "node_modules/arr-flatten/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "arr-diff",
      "version": "4.0.0",
      "description": "Returns an array with only the unique values from the first array, by excluding all values from additional arrays using strict equality for comparisons.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-diff@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/arr-diff"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/arr-diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/arr-diff/package.json"
              }
            ],
            "concludedValue": "node_modules/arr-diff/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/argparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/argparse/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "archiver-utils",
      "version": "1.3.0",
      "description": "utility functions for archiver",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archiver-utils@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/archiver-utils#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/archiver-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver-utils@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver-utils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "archiver",
      "version": "2.1.1",
      "description": "a streaming interface for archive generation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archiver@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-archiver"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-archiver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Elan Shanker (http://github.com/es128)"
        }
      ],
      "group": "",
      "name": "anymatch",
      "version": "2.0.0",
      "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/anymatch@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/anymatch"
        },
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/anymatch"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/anymatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/anymatch/package.json"
              }
            ],
            "concludedValue": "node_modules/anymatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "ajv",
      "version": "6.12.3",
      "description": "Another JSON Schema Validator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.12.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.12.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ajv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ajv/package.json"
              }
            ],
            "concludedValue": "node_modules/ajv/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "airtap",
      "version": "1.0.2",
      "description": "JavaScript browser testing in the cloud",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/airtap@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/airtap/airtap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/airtap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/airtap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/airtap/package.json"
              }
            ],
            "concludedValue": "node_modules/airtap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nasca Iacob <sy@another-d-mention.ro> (https://github.com/cthackers)"
        }
      ],
      "group": "",
      "name": "adm-zip",
      "version": "0.4.16",
      "description": "Javascript implementation of zip for nodejs with support for electron original-fs. Allows user to create or extract zip files both in memory or to/from disk",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/adm-zip@0.4.16",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cthackers/adm-zip"
        },
        {
          "type": "vcs",
          "url": "https://github.com/cthackers/adm-zip.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/adm-zip@0.4.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/adm-zip/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/adm-zip/package.json"
              }
            ],
            "concludedValue": "node_modules/adm-zip/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "7.2.0",
      "description": "ECMAScript (ESTree) AST walker",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-walk@7.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-walk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-walk/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-walk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Renée Kooi <renee@kooi.me>"
        }
      ],
      "group": "",
      "name": "acorn-node",
      "version": "1.8.2",
      "description": "the acorn javascript parser, preloaded with plugins for syntax parity with recent node versions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-node@1.8.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/acorn-node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/browserify/acorn-node.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-node@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-node/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-node/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "group": "",
      "name": "acorn",
      "version": "7.3.1",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@7.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@7.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.7",
      "description": "Higher-level content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/accepts@1.3.7",
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/accepts/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/accepts/package.json"
              }
            ],
            "concludedValue": "node_modules/accepts/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://bit.ly/dominictarr)"
        }
      ],
      "group": "",
      "name": "JSONStream",
      "version": "1.3.5",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/JSONStream@1.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/JSONStream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/JSONStream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/JSONStream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/JSONStream/package.json"
              }
            ],
            "concludedValue": "node_modules/JSONStream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "@sindresorhus",
      "name": "is",
      "version": "0.7.0",
      "description": "Type check values: `is.string('🦄') //=> true`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sindresorhus/is@0.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/@sindresorhus/is@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sindresorhus/is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sindresorhus/is/package.json"
              }
            ],
            "concludedValue": "node_modules/@sindresorhus/is/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/events@3.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-09T17:41:28Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 9, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'events' with version '3.2.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 657 source files."
    }
  ]
}