{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:2b83499a-a020-4fa6-9e4d-f49373eaec51",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-10T05:19:35Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "test",
      "group": "",
      "version": "1.0.0",
      "description": "",
      "purl": "pkg:npm/test@1.0.0",
      "bom-ref": "pkg:npm/test@1.0.0",
      "author": "",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "zip-it-and-ship-it-fixtures",
          "version": "",
          "purl": "pkg:npm/zip-it-and-ship-it-fixtures",
          "type": "application",
          "bom-ref": "pkg:npm/zip-it-and-ship-it-fixtures"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jimp\\n@next\\n@tokenizer\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "benchmarks/fixtures/package-lock.json\\ntests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "filename-reserved-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching reserved filename characters",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "867e1c41f53a18e4ffedc1475c1a9e060d936eb30181d0f491c8cb86f490618c26dece01e9c8ef05f6fb9c100b24b017aa6539c5a8d26bb5f636752e77f54277"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filename-reserved-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/filename-reserved-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "filenamify",
      "version": "6.0.0",
      "description": "Convert a string to a valid safe filename",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bea22536880a7b20f7cb3ae6d3285131083c84e57061c6117e3128383778f620a9acc9f81cbf3980adc7732910139dc43c8a57dc77006c603910b42fdb5e9d01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filenamify@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/filenamify@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3",
      "version": "7.9.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b5538ea354ffb0ec8badf09b7cae2d58b0f3af169838ea4f8af13a426f43fece30a48e43e757b5b37c3273307cb52e703ec23e692d3d708cef74d602d778484"
        }
      ],
      "purl": "pkg:npm/d3@7.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3/-/d3-7.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3@7.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3/-/d3-7.9.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "d3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-array",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5d4009b2035f22e09ef0a6ba58abc0a5731672dd20b7d5031e072c8217246dec1547751110679969ce87b998511865459efa8abc1c1be4f498e989bc8457826"
        }
      ],
      "purl": "pkg:npm/d3-array@3.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-array@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internmap",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4787b635c106ef639a281a03db0da2f98982c03f331352b8ccba5b241cb1fac27bff03ed6ae6b8046a2baa12307ea3119721566cd4517e47f28f37765241862"
        }
      ],
      "purl": "pkg:npm/internmap@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/internmap/-/internmap-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internmap@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/internmap/-/internmap-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-axis",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "207e6d8235788c4fc68479115741e25583c3b6f7e31d09507c91ecd2eb2aeccdf45dc481bcea2da661f522091c5ec3bfe60110643e3707ffdf73b4914f94bec7"
        }
      ],
      "purl": "pkg:npm/d3-axis@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-axis/-/d3-axis-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-axis@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-axis/-/d3-axis-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-brush",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00b9e35a5558917b1520694eb2e587d7edee764605238f0b8e285f9e1f0564f176412f68f8fcc62c1b253b43e3cd5a072d9d8a09580033c3559173c907668d9d"
        }
      ],
      "purl": "pkg:npm/d3-brush@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-brush/-/d3-brush-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-brush@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-brush/-/d3-brush-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-dispatch",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af35323d4fd2eebc147e53322dcd444c37818f4351b8728a01cbee928cf086c86bea0e9ce5df338787368108d8d9b6747577862d67353c5d7be0fdad56f2a17e"
        }
      ],
      "purl": "pkg:npm/d3-dispatch@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-dispatch/-/d3-dispatch-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-dispatch@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-dispatch/-/d3-dispatch-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-drag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a566d424b7444d503c95034979c331a177c7eb1fa63b6510a3cad2999f90ab171bc80de17dea6b160213fff1d6da79470a159e2083304b616afa010046485392"
        }
      ],
      "purl": "pkg:npm/d3-drag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-drag/-/d3-drag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-drag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-drag/-/d3-drag-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-selection",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e64d159b34c9ac996abac4957c0f5f54fe0c3f6f0ac77cd5f1ac837e1df6609f3a931e9f633a628c86c4d48d73899d939d658f50dbccb8c9e6cacea0ca97195"
        }
      ],
      "purl": "pkg:npm/d3-selection@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-selection@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-interpolate",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddb62cd6b383df7ba8f1aa897ca3f72563c089b830f199b6f8bf6f04a107276460faf89347ba39326bf999972278df854586803965f94890135fa9353d6cfbda"
        }
      ],
      "purl": "pkg:npm/d3-interpolate@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-interpolate@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-color",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce0fdc85b5f2781b4c4352db0ff592a16d83a42dc8d26a663dd5beca74538ffc760c0598ac863ba9e6481e2768cf0576e26e226afaf5e653702302f14663b184"
        }
      ],
      "purl": "pkg:npm/d3-color@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-color/-/d3-color-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-color@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-color/-/d3-color-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-transition",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0292af7e3b1247ab60d3ac6b2f8df80b45b274bafb25ec0107757eff7f51307b1a5d3386d339adfce0177a78393392c19b4a239b126ba68990559d5a3ef04be3"
        }
      ],
      "purl": "pkg:npm/d3-transition@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-transition/-/d3-transition-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-transition@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-transition/-/d3-transition-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-ease",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c11fd72b70f75dc2c8670a5bbd0c10e5f2bef1891db358a9ec0d93c5ed32c6771749dab52fdb24706edb95c79d90e5fe65c83118098b5f516b4466c00f0ce2d3"
        }
      ],
      "purl": "pkg:npm/d3-ease@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-ease@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-timer",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dd7c9fc9c7131dde7c37d6ec8aa18da76a2bc5fabdbd57e2dcd2cbd9c5ed49bef2119a2f2152caccbdd3b0812d68eae0479a2cfdd60790d3294f3f46a3d5550"
        }
      ],
      "purl": "pkg:npm/d3-timer@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-timer/-/d3-timer-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-timer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-timer/-/d3-timer-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-chord",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "544e52e9335afa3f26b24b25ec7c23c4c1c3336c8d2b75c292eb089695f99306ae05f5eec8b02d360f630a9fe21c7eb5b60238b1be91fc420c582a8421d8d3fe"
        }
      ],
      "purl": "pkg:npm/d3-chord@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-chord/-/d3-chord-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-chord@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-chord/-/d3-chord-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-path",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82aea06689bd00565bcb460b76ec53d6a9aba78c69040d5866bd7d388ef5ed621d284d8e339113ab9aab1cb6f7d35220c612f072ec6f19954b79e59cfe4d48eb"
        }
      ],
      "purl": "pkg:npm/d3-path@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-path/-/d3-path-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-path@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-path/-/d3-path-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-contour",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e04cc54d1222933b38ed11a67716de52f2d6b4679d0d43644dc9b3a1eca0e2c3ff76f09ec4ee3b01a40bed52b2fe0ba5f394cec70f8806003c512db1c1b4e834"
        }
      ],
      "purl": "pkg:npm/d3-contour@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-contour/-/d3-contour-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-contour@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-contour/-/d3-contour-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-delaunay",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20c2cd95daee0d049cadc7d3f8c5a76b38476c326171127238404025fc109c795ed513e1e960ee2efc4d02b523bb655231252e2a56390461d1276718ca814b41"
        }
      ],
      "purl": "pkg:npm/d3-delaunay@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-delaunay/-/d3-delaunay-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-delaunay@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-delaunay/-/d3-delaunay-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delaunator",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0322efb7225d6effd4d469224ba814533725468018e06b3be6a90cca0249854ef92d6e0336e485d91333a71b3d8f0f4ecf50686c78d37641b7cdd3f9e55c40ab"
        }
      ],
      "purl": "pkg:npm/delaunator@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delaunator/-/delaunator-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delaunator@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delaunator/-/delaunator-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "robust-predicates",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dd108a6ccd41e21b81ed0ec40b788b8cbd1b039e7f1cf2b612b5a6e8721b54782bdfbaf369b5be5351b543ebc2d10082cf5fba7d9ea406878c49827dc41d2fe"
        }
      ],
      "purl": "pkg:npm/robust-predicates@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/robust-predicates@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-dsv",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "506e8ebdd23969f0c814ff70e06d2636ae747523ac5c725a444f1aac04b9a3d0295a7204969f06670d43ba7f2f3fc3b21ce67f40950a509c318a20829d4c26f9"
        }
      ],
      "purl": "pkg:npm/d3-dsv@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-dsv/-/d3-dsv-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-dsv@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-dsv/-/d3-dsv-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/csv2json, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/csv2tsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/dsv2dsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/dsv2json, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/json2csv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/json2dsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/json2tsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/tsv2csv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/tsv2json"
        },
        {
          "name": "cdx:npm:bin",
          "value": "csv2json, csv2tsv, dsv2dsv, dsv2json, json2csv, json2dsv, json2tsv, tsv2csv, tsv2json"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42b59707e6504953e6216221b443bd1fe8301da3066221790a1be827e2bd6461c6fec56c6baca27ac003d460bfc78eac113d345e5c28d6ee3d455555cef71293"
        }
      ],
      "purl": "pkg:npm/commander@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rw",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f862dfa91ab766b14885ef4d01124bfda074fb4"
        }
      ],
      "purl": "pkg:npm/rw@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rw/-/rw-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rw@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rw/-/rw-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-fetch",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92991020cdb49f7a0b54128683aa07ad47211ccdf1383913ce33288fb696405ab940433e47a1385a4cd3e7eb688c363bca37b3f0a802051a23e1a12bf7d15dab"
        }
      ],
      "purl": "pkg:npm/d3-fetch@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-fetch/-/d3-fetch-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-fetch@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-fetch/-/d3-fetch-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-force",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf157f4ac03e538cad7bcd39d4fe040b27630ff4bea9e62d9da23202cf6d8070aa7e0ba66bf6804038e8f3903d67a10a8418ab1d12475c88095257df4f8c1d2e"
        }
      ],
      "purl": "pkg:npm/d3-force@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-force/-/d3-force-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-force@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-force/-/d3-force-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-quadtree",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d38c43af14130d3085c0fe47ea1461b1171bf71c6fd91ce472cca01739a4488389cb73de4493fbb0d93755121b297728839eb53fda14d3fad51fabc344e02053"
        }
      ],
      "purl": "pkg:npm/d3-quadtree@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-quadtree/-/d3-quadtree-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-quadtree@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-quadtree/-/d3-quadtree-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-format",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "632508e8012e63f5a9b7c2962e0647b0853ce9ab668a4ba83a609fa269add0b60789048f8ef5f601c15cdfc3d7d02069af6442c998637b1f8d4bf2cf3afe98a8"
        }
      ],
      "purl": "pkg:npm/d3-format@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-format/-/d3-format-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-format@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-format/-/d3-format-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-geo",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5addb7c41c9c879b52cbd21800cd45476ad62011566b9d81fe817f1987b9cdb747ae0d3c154f3e06e23a5f83ef4f03c376a74076ad387ee589a442edb1a12378"
        }
      ],
      "purl": "pkg:npm/d3-geo@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-geo/-/d3-geo-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-geo@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-geo/-/d3-geo-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-hierarchy",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ed008bb9e1472d4668462a596579f9661da96db47df391f4a2e0d94aad302814a8c2f8014126886c080760081610c07d05f2120e198f3d5f5a4fa8072194c90"
        }
      ],
      "purl": "pkg:npm/d3-hierarchy@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-hierarchy/-/d3-hierarchy-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-hierarchy@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-hierarchy/-/d3-hierarchy-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-polygon",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "def6c0eef5d8c1f7b54988440fef9f3d44255926134c698599089a9f2fe075b896814fe2132433cb29b02fd4a4263145b824b8f74d814b37b0546b071e61ed5e"
        }
      ],
      "purl": "pkg:npm/d3-polygon@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-polygon/-/d3-polygon-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-polygon@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-polygon/-/d3-polygon-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-random",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15731ef467f14f1a9de43ea316c43e0c9f01252e04fdf4f99aaa9d8e8bf2904076a056d330355d8353061717d05be141386a01fbe93cb3006b8304874f57145d"
        }
      ],
      "purl": "pkg:npm/d3-random@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-random/-/d3-random-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-random@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-random/-/d3-random-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-scale",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1995b8eb8835487eda83763b8578dff11a14b80148aa494e02adcc465e0e69669b4c5258f4f37f1356249615cb87e390ddf33dc92da73a40a84be58b67a92fc5"
        }
      ],
      "purl": "pkg:npm/d3-scale@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-scale@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-time",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce65779519e568b234f32f483115d20ec8506f9363efbb269dfa677762eb05aff62b6f352628da72da2479a935e1069c1ecfe42aad00435db59e274d6256ab6d"
        }
      ],
      "purl": "pkg:npm/d3-time@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-time/-/d3-time-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-time@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-time/-/d3-time-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-time-format",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "749c4f065cc2ecdba00763c32f0a3d43c2624d1dccddee3f5c0364ade29253117cbef5caaa6d587eae10e5d97c6ee765ba745595451a0d4805b7b780f03e8d2e"
        }
      ],
      "purl": "pkg:npm/d3-time-format@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-time-format@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-scale-chromatic",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f1f6d86dc402ab3b63eae8e3b651ae3be28a5ece22abdbbf4ffd3299b0c0216323430f712709f7dd6e079260de4eee6d81c90b31b6e3f60920dcccd508676da"
        }
      ],
      "purl": "pkg:npm/d3-scale-chromatic@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-scale-chromatic/-/d3-scale-chromatic-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-scale-chromatic@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-scale-chromatic/-/d3-scale-chromatic-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-shape",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b460e1d4cb9ff245a31034ff2ecc1927c585f39c8364bbd5269614f4dabef3ec96d59e5e9f1ae65ce85302b964684954f824e7d0e4d53658befe2f873f8e5011"
        }
      ],
      "purl": "pkg:npm/d3-shape@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-shape@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-zoom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fc02657791f41aa9602e69c6cfb8d6cbeaf6a19ce25f94e85ec4bccc30d2e06badbefe7874273bc9d1a3bfe5ae4c560505192ec7bb53fd3f4de8ddf2640c2cb"
        }
      ],
      "purl": "pkg:npm/d3-zoom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-zoom/-/d3-zoom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-zoom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-zoom/-/d3-zoom-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jimp",
      "version": "1.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61cc021f0d648aa11e239c51a4394f3c118bd843a904a2f03b8c880497175873e3e4f9c0e6eac6ab48dbca13392a8369ca943a55ba12a3173d0fc1f27ef9e04a"
        }
      ],
      "purl": "pkg:npm/jimp@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jimp/-/jimp-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jimp@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jimp/-/jimp-1.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jimp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_image.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "core",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "110425294decf507dd26a892ad958d4f106cdeb29780ed96f86c4d5c3b707211776b822ac4385e157d6d8be127bfd85d2570e260ba768d346397184fb61b24f3"
        }
      ],
      "purl": "pkg:npm/%40jimp/core@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/core/-/core-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/core@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/core/-/core-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "file-ops",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f1fdb5439a09d17b50259e246908aac6466e58bc6994c1b0f3b7e30092098b19ffa3bc14fbe6198c119d34de7f47408fda3e79bf60a9d78e0fe13a9ccd0a91d"
        }
      ],
      "purl": "pkg:npm/%40jimp/file-ops@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/file-ops/-/file-ops-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/file-ops@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/file-ops/-/file-ops-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "types",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed47d1b222a8e466530004f19b6a90ee3aa65173f40f14c0af3b65953718772c3a5e2e684f845aa17ca756d083e14c8b2b9809824649730a27a228eb85814a7e"
        }
      ],
      "purl": "pkg:npm/%40jimp/types@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/types/-/types-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/types@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/types/-/types-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zod",
      "version": "3.24.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "958ec20d6e37102816f6ed53713dc8a171df972c1f56a0d8cdee30684cfcd768d1fdb67c1470ec97ba454284994f3e4dfb636a457b3c181c27030a3764dc6a85"
        }
      ],
      "purl": "pkg:npm/zod@3.24.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zod/-/zod-3.24.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zod@3.24.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zod/-/zod-3.24.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "zod,zod/z"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/rate_limit.js",
            "line": 1
          },
          {
            "location": "dist/rate_limit.js",
            "line": 2
          },
          {
            "location": "dist/rate_limit.js",
            "line": 3
          },
          {
            "location": "dist/rate_limit.js",
            "line": 4
          },
          {
            "location": "dist/rate_limit.js",
            "line": 5
          },
          {
            "location": "dist/rate_limit.js",
            "line": 6
          },
          {
            "location": "dist/rate_limit.js",
            "line": 7
          },
          {
            "location": "dist/rate_limit.js",
            "line": 9
          },
          {
            "location": "dist/rate_limit.js",
            "line": 10
          },
          {
            "location": "dist/rate_limit.js",
            "line": 12
          },
          {
            "location": "dist/rate_limit.js",
            "line": 15
          },
          {
            "location": "dist/runtimes/node/bundlers/types.js",
            "line": 1
          },
          {
            "location": "dist/runtimes/node/bundlers/types.js",
            "line": 9
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 5
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 19
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 20
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 21
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 35
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 36
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 41
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 42
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 45
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 46
          },
          {
            "location": "dist/runtimes/node/in_source_config/index.js",
            "line": 49
          },
          {
            "location": "dist/runtimes/node/utils/module_format.js",
            "line": 1
          },
          {
            "location": "dist/runtimes/node/utils/module_format.js",
            "line": 7
          },
          {
            "location": "src/rate_limit.ts",
            "line": 1
          },
          {
            "location": "src/rate_limit.ts",
            "line": 22
          },
          {
            "location": "src/rate_limit.ts",
            "line": 23
          },
          {
            "location": "src/rate_limit.ts",
            "line": 24
          },
          {
            "location": "src/rate_limit.ts",
            "line": 25
          },
          {
            "location": "src/rate_limit.ts",
            "line": 26
          },
          {
            "location": "src/rate_limit.ts",
            "line": 27
          },
          {
            "location": "src/rate_limit.ts",
            "line": 29
          },
          {
            "location": "src/rate_limit.ts",
            "line": 30
          },
          {
            "location": "src/rate_limit.ts",
            "line": 33
          },
          {
            "location": "src/rate_limit.ts",
            "line": 36
          },
          {
            "location": "src/runtimes/node/bundlers/types.ts",
            "line": 2
          },
          {
            "location": "src/runtimes/node/bundlers/types.ts",
            "line": 19
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 7
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 39
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 40
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 41
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 59
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 60
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 65
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 66
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 69
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 70
          },
          {
            "location": "src/runtimes/node/in_source_config/index.ts",
            "line": 73
          },
          {
            "location": "src/runtimes/node/utils/module_format.ts",
            "line": 1
          },
          {
            "location": "src/runtimes/node/utils/module_format.ts",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "utils",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82a153184a2c29b3a4605fd6163dba8cc1ce239387da378fd4c982ff36cae8117a54905ff2b202e7cf7c74f7d2cd911b480d306db579b256e7b5655ce4f28b14"
        }
      ],
      "purl": "pkg:npm/%40jimp/utils@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/utils/-/utils-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/utils@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/utils/-/utils-1.6.0.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "utils/routes,utils/format_result,ExtendedRoute,utils/routes.js/ExtendedRoute"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor2",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cf68191640976c7f7a4b28957da78a8dfd2f9f9b63a3f0020fa35053521839a3192f9bdf92544185761c8ecfbb537544dfbf132202ce2ca7afde64ed84c3ea7"
        }
      ],
      "purl": "pkg:npm/tinycolor2@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinycolor2/-/tinycolor2-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor2@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinycolor2/-/tinycolor2-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "await-to-js",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc901a3fdcf14dcbd31d195e8dabb764e63857b491a620727f7fddc71daec8ac71a2bd7db699a9576411b132a291c93085a3e6af6755a71c4cafb8ce098569e6"
        }
      ],
      "purl": "pkg:npm/await-to-js@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/await-to-js/-/await-to-js-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/await-to-js@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/await-to-js/-/await-to-js-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exif-parser",
      "version": "0.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7366d07cb35b3332cf9b342e3abf1fcb472ccbce169b09c447cd56f3c0f34e9f4260d3c9eb2cce8f6119021f69cb0629a879ec8552c7409f16ce5740c9f63e23"
        }
      ],
      "purl": "pkg:npm/exif-parser@0.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exif-parser/-/exif-parser-0.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exif-parser@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exif-parser/-/exif-parser-0.1.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "file-type",
      "version": "16.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff21472b46868c51200c98c428fd29582a65b0f14f870c9fc1ebdffe957188dd2d984e0bf4b9b05b15ae91d2521dda02962e158102de86326dc10067aa6b0a73"
        }
      ],
      "purl": "pkg:npm/file-type@16.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-type/-/file-type-16.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-type@16.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-type/-/file-type-16.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-web-to-node-stream",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78f78ae9c73511c28b121245b7f01e6cc08b2fe1a048a86eca0ad9fc62da29960479c22020409fe14694b9a072886b73724c11e1a8a7f55cd487de53d5ec581b"
        }
      ],
      "purl": "pkg:npm/readable-web-to-node-stream@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-web-to-node-stream/-/readable-web-to-node-stream-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-web-to-node-stream@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-web-to-node-stream/-/readable-web-to-node-stream-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "string_decoder"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_api_hello/nextPage.js",
            "line": 9840
          },
          {
            "location": "benchmarks/fixtures/next_index/nextPage.js",
            "line": 16392
          },
          {
            "location": "benchmarks/fixtures/next_index_2/nextPage.js",
            "line": 16392
          },
          {
            "location": "benchmarks/fixtures/next_index_3/nextPage.js",
            "line": 16392
          },
          {
            "location": "benchmarks/fixtures/next_index_4/nextPage.js",
            "line": 16392
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strtok3",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d9b5b86dbc8f48e3cc434b2c1dfeca2636a8141e5d8bd9cb2d99708289fd22b4e7fdea3796d7c3014b2acbb8d89c610564be93b1919b64cee8e24c9f4b5b927"
        }
      ],
      "purl": "pkg:npm/strtok3@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strtok3/-/strtok3-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strtok3@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strtok3/-/strtok3-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tokenizer",
      "name": "token",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3af8c5fb3e752f7a2fd0ec8053476ecec62ebced353c7ef1e2de83271fa0b9a8604e704792125d1bbb2841e4d214b58ddde7e71f289b67867c97612e5b024ddc"
        }
      ],
      "purl": "pkg:npm/%40tokenizer/token@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tokenizer/token/-/token-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tokenizer/token@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tokenizer/token/-/token-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "peek-readable",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "648dcb9f052fe673866d0cc3f5cda20c6eada217ae5d264fe5eb121c18e8a6c5c7e1d835f6ca2e7efa54180deea218b96a716d19bda584055d1f31fa47f12fbe"
        }
      ],
      "purl": "pkg:npm/peek-readable@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/peek-readable/-/peek-readable-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/peek-readable@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/peek-readable/-/peek-readable-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "token-types",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae741db843bdfb503fd20ec2801c8f450913fb06a73d0ff310515d36391420e62b248ed2c995924d74de242ad71db7009e588c081c319a52c4ec08201af2c15"
        }
      ],
      "purl": "pkg:npm/token-types@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/token-types/-/token-types-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/token-types@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/token-types/-/token-types-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d2094eff541d65a0858165ed7868460753ffb550c107a1a3bbab108e5493b0f46807ef65405a9a7135c8d4fb1f5ada4dc648805734ac57405a91bef67bbebdc"
        }
      ],
      "purl": "pkg:npm/mime@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/jimp/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/diff/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/js-bmp/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/js-gif/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/js-jpeg/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/js-png/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/js-tiff/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/plugin-hash/node_modules/.bin/mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "diff",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb250043982f442e43d561d8c63047648ec9051bac18648b7fc0263d13c27a74f38783c0fb0675c6fdbe718a90c137d01d4e6d5d83a1034c43cad7c751fd59cb"
        }
      ],
      "purl": "pkg:npm/%40jimp/diff@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/diff/-/diff-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/diff@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/diff/-/diff-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-resize",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b92503d66a9737d8b54864b3e68bf791e459ed2f4bdf6fe60101b4f30530662122e45a5b5742bc03c975ce46b3008662f482732e54dab91354e35322f0817d7c"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-resize@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-resize/-/plugin-resize-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-resize@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-resize/-/plugin-resize-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pixelmatch",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3c9a463813ff8b3547fa2f35fdea1b7a93a0840e2eb993d1b6ae332d05ef4ea3e54f292be5fb418a1ee1ff0251be180e4b3c6fe2e61ade924c54737b361d4f9"
        }
      ],
      "purl": "pkg:npm/pixelmatch@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pixelmatch/-/pixelmatch-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pixelmatch@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pixelmatch/-/pixelmatch-5.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/@jimp/diff/node_modules/.bin/pixelmatch"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pixelmatch"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d1cf3b85451984a125bfa7529502688e80f728d88ae56a1f9b18509e35f257c71606c12c3b63000e01c77b5f6f0afe6e5b8c158ab02dbd2b2a0c7c76f2a5aca"
        }
      ],
      "purl": "pkg:npm/pngjs@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pngjs/-/pngjs-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pngjs/-/pngjs-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "js-bmp",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "154e90e4f0bf7b7cb32f20435eea51dd29cbde1b54ed2dca12ce1eeab8c33fa80d10e5d116c5ace980f7857b97779d2377cba69b2faad964b0b8692bf308be1b"
        }
      ],
      "purl": "pkg:npm/%40jimp/js-bmp@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/js-bmp/-/js-bmp-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/js-bmp@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/js-bmp/-/js-bmp-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bmp-ts",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7131079368cbacfca2fb5d8cddd86911b9e73ceb1a66eabb0b8e7295b6d02225a00c566ae145583c46399a5aa3bec8ffea026ff6a5f9b1af9e6c3ccb5d3dbc57"
        }
      ],
      "purl": "pkg:npm/bmp-ts@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bmp-ts/-/bmp-ts-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bmp-ts@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bmp-ts/-/bmp-ts-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "js-gif",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37d0993c73ab253b005285a4599b2d2cfa704f9030274c207bee3bfa2c77fbe49d48bfc7d90cf232ac5b70360d15ee0ca08e4c2210137dbd3f765ff0997db6d6"
        }
      ],
      "purl": "pkg:npm/%40jimp/js-gif@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/js-gif/-/js-gif-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/js-gif@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/js-gif/-/js-gif-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gifwrap",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbbeb46f5be92473662f367fb9b4ed367131e5602937f3d8589bd7be04beb4bd5e8134ed85ac85608410362d77e852c40dc37f232118d84706a482130fa79853"
        }
      ],
      "purl": "pkg:npm/gifwrap@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gifwrap/-/gifwrap-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gifwrap@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gifwrap/-/gifwrap-0.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "image-q",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3df24656021f29026eab7b34b530ce2adced92c89bb9411b2502184f76f2eb072d428f9176587b79fe1ebc9e4d09dc58e027cc6ef164a1c1306e5e0117c46527"
        }
      ],
      "purl": "pkg:npm/image-q@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/image-q/-/image-q-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/image-q@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/image-q/-/image-q-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "16.9.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4292dc5fd652b2add86145270f79c50d8f07ef072d021423fd314a2fc61af2fe5f326dc2157c68f334adb0b025efcd25b68628a355af2945460502bed627ebee"
        }
      ],
      "purl": "pkg:npm/%40types/node@16.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-16.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@16.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-16.9.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "omggif",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2cc253b6f81cfe7ba05e3d1572baecebc327d83d6bd337fadf454db6ab692351443bb7be3bd14fe20aacf4072705a4847a81c83e6dbcbbaaa03d1d28c84a464b"
        }
      ],
      "purl": "pkg:npm/omggif@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/omggif/-/omggif-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/omggif@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/omggif/-/omggif-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "js-jpeg",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eaf8050ea7aeb1b95fe4fa24e81d83522317a651fc46120a02bca3d729fed34ed2200434921335529b719a992eff431f6c2971dabee99c9bfd816a4010974c54"
        }
      ],
      "purl": "pkg:npm/%40jimp/js-jpeg@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/js-jpeg/-/js-jpeg-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/js-jpeg@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/js-jpeg/-/js-jpeg-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jpeg-js",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "599cde0ce12d4ce04ae0c76c6abd08a84539b0caf7bd257646a9002335045760479d47ca1b2b305853c5c0ae44783a3ddcadc5a214876cb0238f4b355b377e76"
        }
      ],
      "purl": "pkg:npm/jpeg-js@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jpeg-js@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "js-png",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01b40749ccb78430e031135f1b4b4f8cbf3c015eaa28020b1917886b7013a56e5016304aa62b2f51a3aa87327b45e89cd686b0c77462cafd79da068f7eab0156"
        }
      ],
      "purl": "pkg:npm/%40jimp/js-png@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/js-png/-/js-png-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/js-png@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/js-png/-/js-png-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca5aa589461b2dc98a3da46be0a2bfe2be4db0f787928c4dd1195bb32c696bdcd983f1b7fb45c606cded6635d10744fe9344feab32e0c7939b78e219d3472a3"
        }
      ],
      "purl": "pkg:npm/pngjs@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pngjs/-/pngjs-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pngjs/-/pngjs-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "js-tiff",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce145e47cffb28ef9a7628e3de1d194143a2ba7de65d4bfbf7360400abc4d0efab3fb12182d2af5893997d1cdd65236fd0fbb5acab6033bdaa82dc1edad16fcb"
        }
      ],
      "purl": "pkg:npm/%40jimp/js-tiff@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/js-tiff/-/js-tiff-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/js-tiff@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/js-tiff/-/js-tiff-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utif2",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa892707d147ac9ee85bb03659961a8ce72fe0570347809fa0607474f35fc5b8b818ed394519c59ade686b6dfef70df611a9eb61c4895aca5488990b32cfb7ef"
        }
      ],
      "purl": "pkg:npm/utif2@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utif2/-/utif2-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utif2@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utif2/-/utif2-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e212c1f0fcb8cd971ee6ce3277d5f3a29ab056fff218d855d4197c353982ab5efadc778adbe130553bfe95e19e2f5dc39e1db07dbaa8c153d70883b4cf8b5a63"
        }
      ],
      "purl": "pkg:npm/pako@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-blit",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "33eb915a5d5cb22eea8a59d22bcbb12b8449312b9578188ed40634fbb00f9df51b40d666ea109ed02085bf5232c350ff0e16fca61f1f4209b99b0334792c6054"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-blit@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-blit/-/plugin-blit-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-blit@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-blit/-/plugin-blit-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-blur",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ceb33b8a2735393c1409bd20feb379cbe52799d12c4f721fb825c224936cf126733f4324675793beec0af5989d0ae328e3e277c64cc289d4706170790b21994f"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-blur@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-blur/-/plugin-blur-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-blur@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-blur/-/plugin-blur-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-circle",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6dd46a7e2ed74c2805df0e9dc735a1b7d123d95ba010eddb40b539e844aa2b462fb9c822632aa5d18247b04b96ef8fc0c487cecaa35c9d25fcea4b73f6b5d5b"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-circle@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-circle/-/plugin-circle-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-circle@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-circle/-/plugin-circle-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-color",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "279abc2150a9901b3121733ee395ce5d3aecc9f6e5c8c660ddaf5e028d0fed53c7e3e0abbf2350c1a61ab5b0086a6488375633c663b70e42195f3463152cf548"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-color@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-color/-/plugin-color-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-color@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-color/-/plugin-color-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-contain",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0dfe7f9576afd083d6c1e323813b1b58f483c0b447c44bc2759fd0ddc7e5e1181613d7f41353f2589066809081a83e7c98be62c40ea333d921a286a969a9fcd"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-contain@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-contain/-/plugin-contain-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-contain@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-contain/-/plugin-contain-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-cover",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "228c3487acaa482dbaf58509f070b743f3290a2d95e79b0c95b9244d3c78ccfbddf26599942d3292b343780cbd2097a0ad0eefe44f7dac9c2642edb997280a2c"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-cover@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-cover/-/plugin-cover-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-cover@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-cover/-/plugin-cover-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-crop",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2aa664121becfb6d5449dc920940c8f8615adfddde0c8cdb8b5b2606a9143d313ea51c1258c01fd350f9382dd9581fb166c3656bddc10d2f620a42c703cc1a9e"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-crop@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-crop/-/plugin-crop-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-crop@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-crop/-/plugin-crop-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-displace",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e18d745fdab0af917e068e4c137e7a5d2002105e79e3ce63e6719d8b227d858ce340ff671a0c4d25a6784803aaa5dfa4e6c15a21e0fb490d0e71cdbab889e0e5"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-displace@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-displace/-/plugin-displace-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-displace@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-displace/-/plugin-displace-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-dither",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb4d1dd51c58d292b0832534b6031a84b34ab2a11cc4675b81769d0a2542a0677a57a825c82be436b9e7c02d27e5a279e87b648fcf0f4e849d17cf2d35564411"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-dither@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-dither/-/plugin-dither-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-dither@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-dither/-/plugin-dither-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-fisheye",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "139407296482045b698196ab96637743afab4d0c638ab16aa38e288684e3cd856b0c8e81e9b7973673c84e12603ebd18f46c1fce0c9aacabd0b90baa0a79df6c"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-fisheye@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-fisheye/-/plugin-fisheye-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-fisheye@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-fisheye/-/plugin-fisheye-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-flip",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffeac9543b812153a0c28c959018d4147b4ffb0996d2bfabe4e4361a96ad4287d3a0f55b270d43758597970be24b1ee1be2c5358b295811590e43c3ceb67a60e"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-flip@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-flip/-/plugin-flip-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-flip@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-flip/-/plugin-flip-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-hash",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c16ce5d244e90c981855b65d6a34dffb834148abe62376d123caba107f4255e207a6cf55595b14bc4c9beeba5b73054b598bb30ed3f64749534fa59e04d407f5"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-hash@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-hash/-/plugin-hash-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-hash@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-hash/-/plugin-hash-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "any-base",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8c823a33c924bc69d65961e3e9696b3c73107dfe47739a95fa4a0259fb06f3d4ae5e624e503180d525a64a871c881d47679c991f47b495812b601fb2e4194ca"
        }
      ],
      "purl": "pkg:npm/any-base@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/any-base/-/any-base-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/any-base@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/any-base/-/any-base-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-mask",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b0cbb131489319b33be469df0d57ca3f67dd97da415414cf26703021355c54d10ead034a29d94291258e757a82bcafa79db3fa9a9371509176a4bcd69b74b9c"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-mask@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-mask/-/plugin-mask-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-mask@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-mask/-/plugin-mask-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-print",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdaad32098bc7e3a0631223f3375e1e7263d4fae69d375c998fb2e35eb75f4afd0ee6c1153a115da97e3fb6f3efb63d5d8d27e86d0c5e6e79c0259c6cb114dd8"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-print@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-print/-/plugin-print-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-print@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-print/-/plugin-print-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-ascii",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53846b56c5050a5788381b0819838c2a39fd3dabec18e5f16ef606b4c3847e721dd1254db207a15e1d43c547553cba317799af704b6f98ab363267f43296b564"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-bmfont-ascii/-/parse-bmfont-ascii-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-bmfont-ascii/-/parse-bmfont-ascii-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-binary",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b19ac45e6b4c1d19d62d863b947964cc58faa6dbe140778188f2f0af86026c167a06853acb8570c3ba9c13a3bad754081a2c81a85470d94bda7fe576d2a9e58"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-binary@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-bmfont-binary/-/parse-bmfont-binary-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-bmfont-binary/-/parse-bmfont-binary-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-xml",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1c125895319121ac50f0321e12c48c95269a98a0e58327d3fcf79b45b92f97b8dcc8e54066064e54e4ee0ab897539d9a52048e0b140dbe66225a8b07d2c2530"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-xml@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-bmfont-xml/-/parse-bmfont-xml-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-xml@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-bmfont-xml/-/parse-bmfont-xml-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "xml-parse-from-string",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12b70ac094c5e78b91cf334c5ead97e6c308cbcf3326f7cdd8399da10bf2ecf00527eb4f454eb2756b8e28d3327e63a37720504c54448bad2cd18d12c88d06d2"
        }
      ],
      "purl": "pkg:npm/xml-parse-from-string@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-parse-from-string/-/xml-parse-from-string-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-parse-from-string/-/xml-parse-from-string-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76b3c59e44098a4fcefae3caa6a4a0af6da6a6e147a8a75b4bcdf988042b502ef72f61795a46e821177adda8bfd9883a2358f389f3c5287d8d4caf9c7e096420"
        }
      ],
      "purl": "pkg:npm/xml2js@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9a58ecfbc9549c106a0a35de0f035d0b67cb24d00ff3e7e9d7406e608943b9ae9ad7f63818b13768bfda827216623c865ecdb647fa346eb7c9cfa1d1405f826"
        }
      ],
      "purl": "pkg:npm/sax@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "11.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c396c23f905131ee02ef6de71cd3fa212c6e747ee810a7caf21f3313b96f6f49ad462745d858a9e1b14c7ba227b71bdf3eaf9e9a4d0214078921b78d91dc9bc"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@11.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@11.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "simple-xml-to-json",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9162430abf445ad67efc461833931aade5a3d9c46764617ddd80cda47e234221c1fa10486677cf15242254ccd939d93ecd75aa4d9ffd7d379036ed83a9e8ae74"
        }
      ],
      "purl": "pkg:npm/simple-xml-to-json@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simple-xml-to-json/-/simple-xml-to-json-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-xml-to-json@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simple-xml-to-json/-/simple-xml-to-json-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "@jimp",
      "name": "plugin-quantize",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "126cd9fecf52b584306e91baad41810a2b1cddfeb82488521fe9dc4c977e8851ad1a8d18bd278c74077ecea8221e97d9a0e2f9e1d35abd9363178a2d2be9af96"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-quantize@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-quantize/-/plugin-quantize-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-quantize@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-quantize/-/plugin-quantize-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-rotate",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25a81d8c12e75191921b8c6308b908a503996773236e0f1a1820a2e06ebda91f8e8cda4e78623b37611095f2bf584f01107396e6f7634b282536a7186d005647"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-rotate@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-rotate/-/plugin-rotate-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-rotate@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-rotate/-/plugin-rotate-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-threshold",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "339f66e5dccba0739559d338d4ef33f52cb24b37039f8df11ec78e1f41dabe3b1f42c4f9e861820b84335356da9c989d6d4ade3e1ce811d4b8dae144f057a2f3"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-threshold@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-threshold/-/plugin-threshold-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-threshold@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-threshold/-/plugin-threshold-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jquery",
      "version": "3.7.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b86afafcc8bf2498537ca6cadb14516607f21fd7888de68f67c3f3609e733e9326c326946c0329d5d81b1fa5362b4d1cac6147400d50fb0a45148b3824a4b7e"
        }
      ],
      "purl": "pkg:npm/jquery@3.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jquery/-/jquery-3.7.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/jquery@3.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jquery/-/jquery-3.7.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jquery"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 2
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "moment",
      "version": "2.30.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b849ad3616c33ab58f152fa176314205fcbd7f6628cb3469c1c97e0eaa42ead697db5173b132d055b315fd6ecfccd497eb1fdb842d73037736510e4dcc7ea1a3"
        }
      ],
      "purl": "pkg:npm/moment@2.30.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/moment/-/moment-2.30.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/moment@2.30.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/moment/-/moment-2.30.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "moment"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next",
      "version": "12.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3cf39916be7225c6c5051eaf541b22322e2b83d06dc1502ff1ac7d021271f994711693041c1ce39181b0c5d216eb5bdbebffb6a6e044df5f803b33a0e3ac4ed"
        }
      ],
      "purl": "pkg:npm/next@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/next/-/next-12.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/next/-/next-12.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/next"
        },
        {
          "name": "cdx:npm:bin",
          "value": "next"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "next/dist/compiled/@ampproject/toolbox-optimizer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_index/nextPage.js",
            "line": 4697
          },
          {
            "location": "benchmarks/fixtures/next_index_2/nextPage.js",
            "line": 4697
          },
          {
            "location": "benchmarks/fixtures/next_index_3/nextPage.js",
            "line": 4697
          },
          {
            "location": "benchmarks/fixtures/next_index_4/nextPage.js",
            "line": 4697
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "17.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82784fb7be62fddabfcf7ffaabfd1ab0fefc0f4bb9f760f92f5a5deccf0ff9d724e85bbf8c978bea25552b6ddfa6d494663f158dffbeef05c0f1435c94641c6c"
        }
      ],
      "purl": "pkg:npm/react@17.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-17.0.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-17.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "972bb13c6aff59f86b95e9b608bfd472751cd7372a280226043cee918ed8e45ff242235d928ebe7d12debe5c351e03324b0edfeb5d54218e34f04b71452a0add"
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/loose-envify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "loose-envify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "17.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3887de8ab4b0d4425b04361327d5aafcb766c46beabf600b63f293cf7488cf0c604321536cac3f5a5cd5aab2951ee80cca0881b40b51d964ba8b57baa938118"
        }
      ],
      "purl": "pkg:npm/react-dom@17.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-17.0.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-17.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "scheduler",
      "version": "0.20.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9e59f1a002aa96146aad74c99c2f9cc230ad54f0a957bfc4901468252f7084b5dd1a0d50d681e17f6280a6be59f9e66e734a4dc9ff6d214da48179239bb100d"
        }
      ],
      "purl": "pkg:npm/scheduler@0.20.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/scheduler/-/scheduler-0.20.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scheduler@0.20.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/scheduler/-/scheduler-0.20.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "env",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9eb22063ab75ec543dc71c07de38f46ba10e890fd60c7528b37e47821b6bf9258dfe7b47210ed4a6ebd28b4bda2f36551d059a0eea4a23e9623b9bc035c0de4d"
        }
      ],
      "purl": "pkg:npm/%40next/env@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/env/-/env-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/env@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/env/-/env-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001346",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aba89b6543b6b7cf100883dac8ffdebae0d112af9a300c451394bbd0f92b2e1d224c38ffcc4860bc944a0b6f82bd763a11673aa10c14478f252f9bc25ba8e25d"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001346",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001346.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001346",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001346.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "8.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c10dba1633caa96aac2433022da934138858a486cffaece615bdb94515333b32b663b7ac8c29deabda48178b311b4d396369c9b83657489599e16e3afce1062"
        }
      ],
      "purl": "pkg:npm/postcss@8.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-8.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@8.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-8.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a064421fce1d34b67a0a2f46d2e4e39c04c8d5f017e728903fb560f7fdbb955f26245d0224700767eba17e42a3d461db4c6ce2c88d3e6f2768da2d483e9107"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/nanoid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nanoid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5fca0ae84cb947bbaeb38b6e95a130eff324609b415c71e72cb2da3e321b19d03fc3196dac9bc13c0235bb354e5555346de46c5b799e6a06e26bf87c8b6248d"
        }
      ],
      "purl": "pkg:npm/picocolors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-js",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4745ef549f56bac2e2a930848860a620208ca65702908c30475d663920fd091e6ef885d8762b1e784b970950234b9e33ab090b70f367994e0e789ead52b5a10f"
        }
      ],
      "purl": "pkg:npm/source-map-js@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-js@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "styled-jsx",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a94aac5a806ab8474445ed74116f2f2e9de34f6e6cfecb06d7fa97e60678c2ed79399a6648c148daff9f5a54612dfca4039ac5b65275304f00f299bfa5e57858"
        }
      ],
      "purl": "pkg:npm/styled-jsx@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/styled-jsx@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use-subscription",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5efd9ad4fff245e02301b87294c7c5a6514a8fd1acb204f037b465713c41ba3150725a12b5634341d738838351587f714b88bf143934e2f401a6d017a05dd570"
        }
      ],
      "purl": "pkg:npm/use-subscription@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use-subscription/-/use-subscription-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use-subscription@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use-subscription/-/use-subscription-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-android-arm64",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff6f3430b7597b45b4decb40ebd88bfafe88f89d5ab1cad0e85ad70655c60ac1b3adf31a1abedfb2431ad13e40850215403e2703fe3a4105b11bffc362e14170"
        }
      ],
      "purl": "pkg:npm/%40next/swc-android-arm64@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-android-arm64/-/swc-android-arm64-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-android-arm64@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-android-arm64/-/swc-android-arm64-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-darwin-arm64",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47cbdc5c4dbf88e349d549dfe4fb6a8e4e8b456ddb8201fef1dacd924cc7e052c44241ed10b86f72627091772e8a9c900ac21a9257405e145b6669b760dd6f5e"
        }
      ],
      "purl": "pkg:npm/%40next/swc-darwin-arm64@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-darwin-arm64@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-darwin-x64",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89e033d3f2743e199b64107cf8403f246761447068805f0159a7aa47b870bde6fa49810825a0cd432d08f9937c805f212e3eb76c40f1240b3f70485d9d3abeba"
        }
      ],
      "purl": "pkg:npm/%40next/swc-darwin-x64@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-darwin-x64@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-arm-gnueabihf",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e351df61a65ea8e80e5dd3c742d1c280817282ce6e5f16d8067ba8b47a4a3c20076d00f6ed1f1b69adedd5792c5d66fb86161fa16f4444c9240ff53d6db64a2"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-arm-gnueabihf@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-arm-gnueabihf/-/swc-linux-arm-gnueabihf-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-arm-gnueabihf@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-arm-gnueabihf/-/swc-linux-arm-gnueabihf-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-arm64-gnu",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6a78092e44715713210ed71bed09f5c63cc5037b39d0423163b9a58db4822f26d4fac0723da5801d8e29c7dee278e96bdb2e12d3174f2a4437042030ca8e9"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-arm64-gnu@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-arm64-gnu@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-arm64-musl",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "841f1c2d2b7819d98ea5cc117b65332395169fa1c73bfbcb92be4e4ee36f089e71183c293d77a5564616ff4f82de0e5ac5b0d6d93ca6e12f8c4029241fd41f58"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-arm64-musl@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-arm64-musl@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-x64-gnu",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38a3b847f76282fad5bb0792c3fb813389d2772cec055e44c2451e786e0a5699086447bae19c11a67141eb96c2ea11b0c480674efe4d3129c9fb42bf5a61bbf0"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-x64-gnu@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-x64-gnu@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-x64-musl",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2688618001d9bce0f7ad063bb65a7b3659afb6f607058818d31e5909e7144fa78209c97d96fea25779dfbbcd84ae4c4d9351fcf777ea1f4154a739d9fc7de94b"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-x64-musl@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-x64-musl@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-win32-arm64-msvc",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4ffde0204e9011f288278766264ef9bfd861362619850600a189b8895a354e072cb9a28b15afb330f878d39e801e21ba9fdb67d9443508513c128c9b12caac4b"
        }
      ],
      "purl": "pkg:npm/%40next/swc-win32-arm64-msvc@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-win32-arm64-msvc@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-win32-ia32-msvc",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b09ca80725daa1216d7d1fd3d13ccf63e7957a45d70ea3aad7fb98a6c7cdf60425b39036f2a265a797305fafa0725187e1a216fc42e1f88521848a4a4fa88d1"
        }
      ],
      "purl": "pkg:npm/%40next/swc-win32-ia32-msvc@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-win32-ia32-msvc/-/swc-win32-ia32-msvc-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-win32-ia32-msvc@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-win32-ia32-msvc/-/swc-win32-ia32-msvc-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-win32-x64-msvc",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "681bdc6ccc2e6a70c7e0432b2f64ed84d272fb89cfe7d0629a7f1e82abfa1873158f46b8e1c53a02ee0f8ce84b36a121f65f88a51181a8c4f379cf7851d0b9c6"
        }
      ],
      "purl": "pkg:npm/%40next/swc-win32-x64-msvc@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-win32-x64-msvc@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/filename-reserved-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filenamify@6.0.0",
      "dependsOn": [
        "pkg:npm/filename-reserved-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/internmap@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-array@3.2.4",
      "dependsOn": [
        "pkg:npm/internmap@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/d3-axis@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-dispatch@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-selection@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-drag@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-selection@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-color@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-interpolate@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-color@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-ease@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-timer@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-transition@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-color@3.1.0",
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-ease@3.0.1",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-timer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-brush@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-drag@3.0.0",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-transition@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-path@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-chord@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-path@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-contour@4.0.2",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4"
      ]
    },
    {
      "ref": "pkg:npm/robust-predicates@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delaunator@5.0.0",
      "dependsOn": [
        "pkg:npm/robust-predicates@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-delaunay@6.0.2",
      "dependsOn": [
        "pkg:npm/delaunator@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/rw@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-dsv@3.0.1",
      "dependsOn": [
        "pkg:npm/commander@7.2.0",
        "pkg:npm/iconv-lite@0.6.3",
        "pkg:npm/rw@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/d3-fetch@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-dsv@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-quadtree@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-force@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-quadtree@3.0.1",
        "pkg:npm/d3-timer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-format@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-geo@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4"
      ]
    },
    {
      "ref": "pkg:npm/d3-hierarchy@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-polygon@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-random@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-time@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4"
      ]
    },
    {
      "ref": "pkg:npm/d3-time-format@4.1.0",
      "dependsOn": [
        "pkg:npm/d3-time@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-scale@4.0.2",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4",
        "pkg:npm/d3-format@3.1.0",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-time-format@4.1.0",
        "pkg:npm/d3-time@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-scale-chromatic@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-color@3.1.0",
        "pkg:npm/d3-interpolate@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-shape@3.1.0",
      "dependsOn": [
        "pkg:npm/d3-path@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-zoom@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-drag@3.0.0",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-transition@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3@7.9.0",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4",
        "pkg:npm/d3-axis@3.0.0",
        "pkg:npm/d3-brush@3.0.0",
        "pkg:npm/d3-chord@3.0.1",
        "pkg:npm/d3-color@3.1.0",
        "pkg:npm/d3-contour@4.0.2",
        "pkg:npm/d3-delaunay@6.0.2",
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-drag@3.0.0",
        "pkg:npm/d3-dsv@3.0.1",
        "pkg:npm/d3-ease@3.0.1",
        "pkg:npm/d3-fetch@3.0.1",
        "pkg:npm/d3-force@3.0.0",
        "pkg:npm/d3-format@3.1.0",
        "pkg:npm/d3-geo@3.0.1",
        "pkg:npm/d3-hierarchy@3.1.1",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-path@3.0.1",
        "pkg:npm/d3-polygon@3.0.1",
        "pkg:npm/d3-quadtree@3.0.1",
        "pkg:npm/d3-random@3.0.1",
        "pkg:npm/d3-scale-chromatic@3.0.0",
        "pkg:npm/d3-scale@4.0.2",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-shape@3.1.0",
        "pkg:npm/d3-time-format@4.1.0",
        "pkg:npm/d3-time@3.0.0",
        "pkg:npm/d3-timer@3.0.1",
        "pkg:npm/d3-transition@3.0.1",
        "pkg:npm/d3-zoom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/file-ops@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zod@3.24.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/types@1.6.0",
      "dependsOn": [
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/tinycolor2@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/utils@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/tinycolor2@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/await-to-js@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/exif-parser@0.1.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.3.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.3.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/readable-web-to-node-stream@3.0.2",
      "dependsOn": [
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/@tokenizer/token@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/peek-readable@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strtok3@6.3.0",
      "dependsOn": [
        "pkg:npm/@tokenizer/token@0.3.0",
        "pkg:npm/peek-readable@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/token-types@4.2.1",
      "dependsOn": [
        "pkg:npm/@tokenizer/token@0.3.0",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/file-type@16.5.4",
      "dependsOn": [
        "pkg:npm/readable-web-to-node-stream@3.0.2",
        "pkg:npm/strtok3@6.3.0",
        "pkg:npm/token-types@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/mime@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/core@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/file-ops@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/await-to-js@3.0.0",
        "pkg:npm/exif-parser@0.1.12",
        "pkg:npm/file-type@16.5.4",
        "pkg:npm/mime@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-resize@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pixelmatch@5.3.0",
      "dependsOn": [
        "pkg:npm/pngjs@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/diff@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/plugin-resize@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/pixelmatch@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/bmp-ts@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/js-bmp@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/bmp-ts@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@16.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/image-q@4.0.0",
      "dependsOn": [
        "pkg:npm/@types/node@16.9.1"
      ]
    },
    {
      "ref": "pkg:npm/omggif@1.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gifwrap@0.10.1",
      "dependsOn": [
        "pkg:npm/image-q@4.0.0",
        "pkg:npm/omggif@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/js-gif@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/gifwrap@0.10.1",
        "pkg:npm/omggif@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/jpeg-js@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/js-jpeg@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/jpeg-js@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/js-png@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/pngjs@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pako@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utif2@4.1.0",
      "dependsOn": [
        "pkg:npm/pako@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/js-tiff@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/utif2@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-blit@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-blur@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-circle@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-color@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/tinycolor2@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-contain@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/plugin-blit@1.6.0",
        "pkg:npm/@jimp/plugin-resize@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-crop@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-cover@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/plugin-crop@1.6.0",
        "pkg:npm/@jimp/plugin-resize@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-displace@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-dither@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-fisheye@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-flip@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/any-base@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/plugin-hash@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/js-bmp@1.6.0",
        "pkg:npm/@jimp/js-jpeg@1.6.0",
        "pkg:npm/@jimp/js-png@1.6.0",
        "pkg:npm/@jimp/js-tiff@1.6.0",
        "pkg:npm/@jimp/plugin-color@1.6.0",
        "pkg:npm/@jimp/plugin-resize@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/any-base@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-mask@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sax@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@11.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.5.0",
      "dependsOn": [
        "pkg:npm/sax@1.4.1",
        "pkg:npm/xmlbuilder@11.0.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-bmfont-xml@1.1.6",
      "dependsOn": [
        "pkg:npm/xml-parse-from-string@1.0.1",
        "pkg:npm/xml2js@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/simple-xml-to-json@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/plugin-print@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/js-jpeg@1.6.0",
        "pkg:npm/@jimp/js-png@1.6.0",
        "pkg:npm/@jimp/plugin-blit@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/parse-bmfont-ascii@1.0.6",
        "pkg:npm/parse-bmfont-binary@1.0.6",
        "pkg:npm/parse-bmfont-xml@1.1.6",
        "pkg:npm/simple-xml-to-json@1.2.3",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-quantize@1.6.0",
      "dependsOn": [
        "pkg:npm/image-q@4.0.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-rotate@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/plugin-crop@1.6.0",
        "pkg:npm/@jimp/plugin-resize@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-threshold@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/plugin-color@1.6.0",
        "pkg:npm/@jimp/plugin-hash@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0",
        "pkg:npm/zod@3.24.2"
      ]
    },
    {
      "ref": "pkg:npm/jimp@1.6.0",
      "dependsOn": [
        "pkg:npm/@jimp/core@1.6.0",
        "pkg:npm/@jimp/diff@1.6.0",
        "pkg:npm/@jimp/js-bmp@1.6.0",
        "pkg:npm/@jimp/js-gif@1.6.0",
        "pkg:npm/@jimp/js-jpeg@1.6.0",
        "pkg:npm/@jimp/js-png@1.6.0",
        "pkg:npm/@jimp/js-tiff@1.6.0",
        "pkg:npm/@jimp/plugin-blit@1.6.0",
        "pkg:npm/@jimp/plugin-blur@1.6.0",
        "pkg:npm/@jimp/plugin-circle@1.6.0",
        "pkg:npm/@jimp/plugin-color@1.6.0",
        "pkg:npm/@jimp/plugin-contain@1.6.0",
        "pkg:npm/@jimp/plugin-cover@1.6.0",
        "pkg:npm/@jimp/plugin-crop@1.6.0",
        "pkg:npm/@jimp/plugin-displace@1.6.0",
        "pkg:npm/@jimp/plugin-dither@1.6.0",
        "pkg:npm/@jimp/plugin-fisheye@1.6.0",
        "pkg:npm/@jimp/plugin-flip@1.6.0",
        "pkg:npm/@jimp/plugin-hash@1.6.0",
        "pkg:npm/@jimp/plugin-mask@1.6.0",
        "pkg:npm/@jimp/plugin-print@1.6.0",
        "pkg:npm/@jimp/plugin-quantize@1.6.0",
        "pkg:npm/@jimp/plugin-resize@1.6.0",
        "pkg:npm/@jimp/plugin-rotate@1.6.0",
        "pkg:npm/@jimp/plugin-threshold@1.6.0",
        "pkg:npm/@jimp/types@1.6.0",
        "pkg:npm/@jimp/utils@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/jquery@3.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/moment@2.30.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.4.0",
      "dependsOn": [
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react@17.0.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/scheduler@0.20.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@17.0.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react@17.0.2",
        "pkg:npm/scheduler@0.20.2"
      ]
    },
    {
      "ref": "pkg:npm/@next/env@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001346",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picocolors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-js@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss@8.4.5",
      "dependsOn": [
        "pkg:npm/nanoid@3.3.4",
        "pkg:npm/picocolors@1.0.0",
        "pkg:npm/source-map-js@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/styled-jsx@5.0.0",
      "dependsOn": [
        "pkg:npm/react@17.0.2"
      ]
    },
    {
      "ref": "pkg:npm/use-subscription@1.5.1",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react@17.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@next/swc-android-arm64@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-darwin-arm64@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-darwin-x64@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-arm-gnueabihf@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-arm64-gnu@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-arm64-musl@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-x64-gnu@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-x64-musl@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-win32-arm64-msvc@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-win32-ia32-msvc@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-win32-x64-msvc@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/next@12.1.0",
      "dependsOn": [
        "pkg:npm/@next/env@12.1.0",
        "pkg:npm/@next/swc-android-arm64@12.1.0",
        "pkg:npm/@next/swc-darwin-arm64@12.1.0",
        "pkg:npm/@next/swc-darwin-x64@12.1.0",
        "pkg:npm/@next/swc-linux-arm-gnueabihf@12.1.0",
        "pkg:npm/@next/swc-linux-arm64-gnu@12.1.0",
        "pkg:npm/@next/swc-linux-arm64-musl@12.1.0",
        "pkg:npm/@next/swc-linux-x64-gnu@12.1.0",
        "pkg:npm/@next/swc-linux-x64-musl@12.1.0",
        "pkg:npm/@next/swc-win32-arm64-msvc@12.1.0",
        "pkg:npm/@next/swc-win32-ia32-msvc@12.1.0",
        "pkg:npm/@next/swc-win32-x64-msvc@12.1.0",
        "pkg:npm/caniuse-lite@1.0.30001346",
        "pkg:npm/postcss@8.4.5",
        "pkg:npm/react-dom@17.0.2",
        "pkg:npm/react@17.0.2",
        "pkg:npm/styled-jsx@5.0.0",
        "pkg:npm/use-subscription@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/zip-it-and-ship-it-fixtures",
      "dependsOn": [
        "pkg:npm/d3@7.9.0",
        "pkg:npm/jimp@1.6.0",
        "pkg:npm/jquery@3.7.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/moment@2.30.1",
        "pkg:npm/next@12.1.0",
        "pkg:npm/react-dom@17.0.2",
        "pkg:npm/react@17.0.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/test@1.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-10T05:19:35Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'test' with version '1.0.0'. The application also has 1 child modules/components. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: benchmarks/fixtures/package-lock.json, tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml."
    }
  ]
}