{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:64bbde24-2cc2-4026-bcf1-290a341ed0b1",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-10T05:42:00Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "test",
      "group": "",
      "version": "1.0.0",
      "description": "",
      "purl": "pkg:npm/test@1.0.0",
      "bom-ref": "pkg:npm/test@1.0.0",
      "author": "",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "zip-it-and-ship-it-fixtures",
          "version": "",
          "purl": "pkg:npm/zip-it-and-ship-it-fixtures",
          "type": "application",
          "bom-ref": "pkg:npm/zip-it-and-ship-it-fixtures"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jimp\\n@next\\n@tokenizer\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "benchmarks/fixtures/package-lock.json\\ntests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "filename-reserved-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching reserved filename characters",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "867e1c41f53a18e4ffedc1475c1a9e060d936eb30181d0f491c8cb86f490618c26dece01e9c8ef05f6fb9c100b24b017aa6539c5a8d26bb5f636752e77f54277"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filename-reserved-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/filename-reserved-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "filenamify",
      "version": "6.0.0",
      "description": "Convert a string to a valid safe filename",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bea22536880a7b20f7cb3ae6d3285131083c84e57061c6117e3128383778f620a9acc9f81cbf3980adc7732910139dc43c8a57dc77006c603910b42fdb5e9d01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filenamify@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/filenamify@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3",
      "version": "7.9.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b5538ea354ffb0ec8badf09b7cae2d58b0f3af169838ea4f8af13a426f43fece30a48e43e757b5b37c3273307cb52e703ec23e692d3d708cef74d602d778484"
        }
      ],
      "purl": "pkg:npm/d3@7.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3/-/d3-7.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3@7.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3/-/d3-7.9.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "d3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-array",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5d4009b2035f22e09ef0a6ba58abc0a5731672dd20b7d5031e072c8217246dec1547751110679969ce87b998511865459efa8abc1c1be4f498e989bc8457826"
        }
      ],
      "purl": "pkg:npm/d3-array@3.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-array@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internmap",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4787b635c106ef639a281a03db0da2f98982c03f331352b8ccba5b241cb1fac27bff03ed6ae6b8046a2baa12307ea3119721566cd4517e47f28f37765241862"
        }
      ],
      "purl": "pkg:npm/internmap@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/internmap/-/internmap-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internmap@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/internmap/-/internmap-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-axis",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "207e6d8235788c4fc68479115741e25583c3b6f7e31d09507c91ecd2eb2aeccdf45dc481bcea2da661f522091c5ec3bfe60110643e3707ffdf73b4914f94bec7"
        }
      ],
      "purl": "pkg:npm/d3-axis@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-axis/-/d3-axis-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-axis@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-axis/-/d3-axis-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-brush",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00b9e35a5558917b1520694eb2e587d7edee764605238f0b8e285f9e1f0564f176412f68f8fcc62c1b253b43e3cd5a072d9d8a09580033c3559173c907668d9d"
        }
      ],
      "purl": "pkg:npm/d3-brush@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-brush/-/d3-brush-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-brush@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-brush/-/d3-brush-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-dispatch",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af35323d4fd2eebc147e53322dcd444c37818f4351b8728a01cbee928cf086c86bea0e9ce5df338787368108d8d9b6747577862d67353c5d7be0fdad56f2a17e"
        }
      ],
      "purl": "pkg:npm/d3-dispatch@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-dispatch/-/d3-dispatch-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-dispatch@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-dispatch/-/d3-dispatch-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-drag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a566d424b7444d503c95034979c331a177c7eb1fa63b6510a3cad2999f90ab171bc80de17dea6b160213fff1d6da79470a159e2083304b616afa010046485392"
        }
      ],
      "purl": "pkg:npm/d3-drag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-drag/-/d3-drag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-drag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-drag/-/d3-drag-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-selection",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e64d159b34c9ac996abac4957c0f5f54fe0c3f6f0ac77cd5f1ac837e1df6609f3a931e9f633a628c86c4d48d73899d939d658f50dbccb8c9e6cacea0ca97195"
        }
      ],
      "purl": "pkg:npm/d3-selection@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-selection@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-selection/-/d3-selection-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-interpolate",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddb62cd6b383df7ba8f1aa897ca3f72563c089b830f199b6f8bf6f04a107276460faf89347ba39326bf999972278df854586803965f94890135fa9353d6cfbda"
        }
      ],
      "purl": "pkg:npm/d3-interpolate@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-interpolate@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-interpolate/-/d3-interpolate-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-color",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce0fdc85b5f2781b4c4352db0ff592a16d83a42dc8d26a663dd5beca74538ffc760c0598ac863ba9e6481e2768cf0576e26e226afaf5e653702302f14663b184"
        }
      ],
      "purl": "pkg:npm/d3-color@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-color/-/d3-color-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-color@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-color/-/d3-color-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-transition",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0292af7e3b1247ab60d3ac6b2f8df80b45b274bafb25ec0107757eff7f51307b1a5d3386d339adfce0177a78393392c19b4a239b126ba68990559d5a3ef04be3"
        }
      ],
      "purl": "pkg:npm/d3-transition@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-transition/-/d3-transition-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-transition@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-transition/-/d3-transition-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-ease",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c11fd72b70f75dc2c8670a5bbd0c10e5f2bef1891db358a9ec0d93c5ed32c6771749dab52fdb24706edb95c79d90e5fe65c83118098b5f516b4466c00f0ce2d3"
        }
      ],
      "purl": "pkg:npm/d3-ease@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-ease@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-timer",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dd7c9fc9c7131dde7c37d6ec8aa18da76a2bc5fabdbd57e2dcd2cbd9c5ed49bef2119a2f2152caccbdd3b0812d68eae0479a2cfdd60790d3294f3f46a3d5550"
        }
      ],
      "purl": "pkg:npm/d3-timer@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-timer/-/d3-timer-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-timer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-timer/-/d3-timer-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-chord",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "544e52e9335afa3f26b24b25ec7c23c4c1c3336c8d2b75c292eb089695f99306ae05f5eec8b02d360f630a9fe21c7eb5b60238b1be91fc420c582a8421d8d3fe"
        }
      ],
      "purl": "pkg:npm/d3-chord@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-chord/-/d3-chord-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-chord@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-chord/-/d3-chord-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-path",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82aea06689bd00565bcb460b76ec53d6a9aba78c69040d5866bd7d388ef5ed621d284d8e339113ab9aab1cb6f7d35220c612f072ec6f19954b79e59cfe4d48eb"
        }
      ],
      "purl": "pkg:npm/d3-path@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-path/-/d3-path-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-path@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-path/-/d3-path-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-contour",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e04cc54d1222933b38ed11a67716de52f2d6b4679d0d43644dc9b3a1eca0e2c3ff76f09ec4ee3b01a40bed52b2fe0ba5f394cec70f8806003c512db1c1b4e834"
        }
      ],
      "purl": "pkg:npm/d3-contour@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-contour/-/d3-contour-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-contour@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-contour/-/d3-contour-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-delaunay",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20c2cd95daee0d049cadc7d3f8c5a76b38476c326171127238404025fc109c795ed513e1e960ee2efc4d02b523bb655231252e2a56390461d1276718ca814b41"
        }
      ],
      "purl": "pkg:npm/d3-delaunay@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-delaunay/-/d3-delaunay-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-delaunay@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-delaunay/-/d3-delaunay-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delaunator",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0322efb7225d6effd4d469224ba814533725468018e06b3be6a90cca0249854ef92d6e0336e485d91333a71b3d8f0f4ecf50686c78d37641b7cdd3f9e55c40ab"
        }
      ],
      "purl": "pkg:npm/delaunator@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delaunator/-/delaunator-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delaunator@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delaunator/-/delaunator-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "robust-predicates",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dd108a6ccd41e21b81ed0ec40b788b8cbd1b039e7f1cf2b612b5a6e8721b54782bdfbaf369b5be5351b543ebc2d10082cf5fba7d9ea406878c49827dc41d2fe"
        }
      ],
      "purl": "pkg:npm/robust-predicates@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/robust-predicates@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-dsv",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "506e8ebdd23969f0c814ff70e06d2636ae747523ac5c725a444f1aac04b9a3d0295a7204969f06670d43ba7f2f3fc3b21ce67f40950a509c318a20829d4c26f9"
        }
      ],
      "purl": "pkg:npm/d3-dsv@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-dsv/-/d3-dsv-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-dsv@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-dsv/-/d3-dsv-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/csv2json, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/csv2tsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/dsv2dsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/dsv2json, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/json2csv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/json2dsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/json2tsv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/tsv2csv, /app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/tsv2json"
        },
        {
          "name": "cdx:npm:bin",
          "value": "csv2json, csv2tsv, dsv2dsv, dsv2json, json2csv, json2dsv, json2tsv, tsv2csv, tsv2json"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42b59707e6504953e6216221b443bd1fe8301da3066221790a1be827e2bd6461c6fec56c6baca27ac003d460bfc78eac113d345e5c28d6ee3d455555cef71293"
        }
      ],
      "purl": "pkg:npm/commander@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rw",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f862dfa91ab766b14885ef4d01124bfda074fb4"
        }
      ],
      "purl": "pkg:npm/rw@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rw/-/rw-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rw@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rw/-/rw-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-fetch",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92991020cdb49f7a0b54128683aa07ad47211ccdf1383913ce33288fb696405ab940433e47a1385a4cd3e7eb688c363bca37b3f0a802051a23e1a12bf7d15dab"
        }
      ],
      "purl": "pkg:npm/d3-fetch@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-fetch/-/d3-fetch-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-fetch@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-fetch/-/d3-fetch-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-force",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf157f4ac03e538cad7bcd39d4fe040b27630ff4bea9e62d9da23202cf6d8070aa7e0ba66bf6804038e8f3903d67a10a8418ab1d12475c88095257df4f8c1d2e"
        }
      ],
      "purl": "pkg:npm/d3-force@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-force/-/d3-force-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-force@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-force/-/d3-force-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-quadtree",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d38c43af14130d3085c0fe47ea1461b1171bf71c6fd91ce472cca01739a4488389cb73de4493fbb0d93755121b297728839eb53fda14d3fad51fabc344e02053"
        }
      ],
      "purl": "pkg:npm/d3-quadtree@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-quadtree/-/d3-quadtree-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-quadtree@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-quadtree/-/d3-quadtree-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-format",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "632508e8012e63f5a9b7c2962e0647b0853ce9ab668a4ba83a609fa269add0b60789048f8ef5f601c15cdfc3d7d02069af6442c998637b1f8d4bf2cf3afe98a8"
        }
      ],
      "purl": "pkg:npm/d3-format@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-format/-/d3-format-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-format@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-format/-/d3-format-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-geo",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5addb7c41c9c879b52cbd21800cd45476ad62011566b9d81fe817f1987b9cdb747ae0d3c154f3e06e23a5f83ef4f03c376a74076ad387ee589a442edb1a12378"
        }
      ],
      "purl": "pkg:npm/d3-geo@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-geo/-/d3-geo-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-geo@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-geo/-/d3-geo-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-hierarchy",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ed008bb9e1472d4668462a596579f9661da96db47df391f4a2e0d94aad302814a8c2f8014126886c080760081610c07d05f2120e198f3d5f5a4fa8072194c90"
        }
      ],
      "purl": "pkg:npm/d3-hierarchy@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-hierarchy/-/d3-hierarchy-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-hierarchy@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-hierarchy/-/d3-hierarchy-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-polygon",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "def6c0eef5d8c1f7b54988440fef9f3d44255926134c698599089a9f2fe075b896814fe2132433cb29b02fd4a4263145b824b8f74d814b37b0546b071e61ed5e"
        }
      ],
      "purl": "pkg:npm/d3-polygon@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-polygon/-/d3-polygon-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-polygon@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-polygon/-/d3-polygon-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-random",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15731ef467f14f1a9de43ea316c43e0c9f01252e04fdf4f99aaa9d8e8bf2904076a056d330355d8353061717d05be141386a01fbe93cb3006b8304874f57145d"
        }
      ],
      "purl": "pkg:npm/d3-random@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-random/-/d3-random-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-random@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-random/-/d3-random-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-scale",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1995b8eb8835487eda83763b8578dff11a14b80148aa494e02adcc465e0e69669b4c5258f4f37f1356249615cb87e390ddf33dc92da73a40a84be58b67a92fc5"
        }
      ],
      "purl": "pkg:npm/d3-scale@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-scale@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-scale/-/d3-scale-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-time",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce65779519e568b234f32f483115d20ec8506f9363efbb269dfa677762eb05aff62b6f352628da72da2479a935e1069c1ecfe42aad00435db59e274d6256ab6d"
        }
      ],
      "purl": "pkg:npm/d3-time@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-time/-/d3-time-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-time@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-time/-/d3-time-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-time-format",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "749c4f065cc2ecdba00763c32f0a3d43c2624d1dccddee3f5c0364ade29253117cbef5caaa6d587eae10e5d97c6ee765ba745595451a0d4805b7b780f03e8d2e"
        }
      ],
      "purl": "pkg:npm/d3-time-format@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-time-format@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-time-format/-/d3-time-format-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-scale-chromatic",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f1f6d86dc402ab3b63eae8e3b651ae3be28a5ece22abdbbf4ffd3299b0c0216323430f712709f7dd6e079260de4eee6d81c90b31b6e3f60920dcccd508676da"
        }
      ],
      "purl": "pkg:npm/d3-scale-chromatic@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-scale-chromatic/-/d3-scale-chromatic-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-scale-chromatic@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-scale-chromatic/-/d3-scale-chromatic-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-shape",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b460e1d4cb9ff245a31034ff2ecc1927c585f39c8364bbd5269614f4dabef3ec96d59e5e9f1ae65ce85302b964684954f824e7d0e4d53658befe2f873f8e5011"
        }
      ],
      "purl": "pkg:npm/d3-shape@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-shape@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d3-zoom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fc02657791f41aa9602e69c6cfb8d6cbeaf6a19ce25f94e85ec4bccc30d2e06badbefe7874273bc9d1a3bfe5ae4c560505192ec7bb53fd3f4de8ddf2640c2cb"
        }
      ],
      "purl": "pkg:npm/d3-zoom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d3-zoom/-/d3-zoom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d3-zoom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d3-zoom/-/d3-zoom-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jimp",
      "version": "0.22.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4798d96980e77e4c4a272d5dc0ba63ffb72fca3c62725c54dc5e13ac8fc9e23dab4b49e2aba60350ca0f9f986cf060e93be3991a8ecacb4e7b091b567acca17e"
        }
      ],
      "purl": "pkg:npm/jimp@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jimp/-/jimp-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jimp@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jimp/-/jimp-0.22.12.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jimp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_image.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "custom",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c9b0c353bf2453f632b94650c77743bf12dd0bba5b79984d762e22a16adf7128ae060757f1eaca61df5f2f468e2089ece23eee55b1ea76053b353b338addd5"
        }
      ],
      "purl": "pkg:npm/%40jimp/custom@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/custom/-/custom-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/custom@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/custom/-/custom-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "core",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "974451d1d38fcb330a7e3516d6e79bcee785103b423a3f5f37aa724d859638cfd54b805c897435555ac9b3ca4ede4c9c1986719dc44a842a3281b36bf1e11940"
        }
      ],
      "purl": "pkg:npm/%40jimp/core@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/core/-/core-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/core@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/core/-/core-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "utils",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c89e5c5949271a78a506af7b6573b2392d0786c1cec80ca31f061f1f119b4b2313a2181023ab15c84f0a3e00f01fc1c75bf9cc29793c4eb4b0004ef5cedef5e9"
        }
      ],
      "purl": "pkg:npm/%40jimp/utils@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/utils/-/utils-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/utils@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/utils/-/utils-0.22.12.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "utils/routes,utils/format_result,ExtendedRoute,utils/routes.js/ExtendedRoute"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.13.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a77553f9c38483116c45103d5f896423513e936fc2b672ad53881cc7268252b7a294bfefa88e82759df0c55531dd439483e82750e41071123b066488eb9e8c60"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.13.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.13.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "any-base",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8c823a33c924bc69d65961e3e9696b3c73107dfe47739a95fa4a0259fb06f3d4ae5e624e503180d525a64a871c881d47679c991f47b495812b601fb2e4194ca"
        }
      ],
      "purl": "pkg:npm/any-base@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/any-base/-/any-base-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/any-base@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/any-base/-/any-base-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "5.7.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10773220f050e0148696f8c1d7a9392a0009dbb088b0763fd8906609145ea38f32f6b43731a533597dca56505ae14eccc97d361dd563d0aec2dd6681de3bbb15"
        }
      ],
      "purl": "pkg:npm/buffer@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "buffer,Buffer,buffer/Buffer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_api_hello/nextPage.js",
            "line": 3256
          },
          {
            "location": "benchmarks/fixtures/next_index/nextPage.js",
            "line": 5323
          },
          {
            "location": "benchmarks/fixtures/next_index_2/nextPage.js",
            "line": 5323
          },
          {
            "location": "benchmarks/fixtures/next_index_3/nextPage.js",
            "line": 5323
          },
          {
            "location": "benchmarks/fixtures/next_index_4/nextPage.js",
            "line": 5323
          },
          {
            "location": "dist/runtimes/node/utils/zip.js",
            "line": 1
          },
          {
            "location": "dist/runtimes/node/utils/zip.js",
            "line": 179
          },
          {
            "location": "src/archive.ts",
            "line": 1
          },
          {
            "location": "src/runtimes/node/utils/zip.ts",
            "line": 1
          },
          {
            "location": "src/runtimes/node/utils/zip.ts",
            "line": 308
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exif-parser",
      "version": "0.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7366d07cb35b3332cf9b342e3abf1fcb472ccbce169b09c447cd56f3c0f34e9f4260d3c9eb2cce8f6119021f69cb0629a879ec8552c7409f16ce5740c9f63e23"
        }
      ],
      "purl": "pkg:npm/exif-parser@0.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exif-parser/-/exif-parser-0.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exif-parser@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exif-parser/-/exif-parser-0.1.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "file-type",
      "version": "16.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff21472b46868c51200c98c428fd29582a65b0f14f870c9fc1ebdffe957188dd2d984e0bf4b9b05b15ae91d2521dda02962e158102de86326dc10067aa6b0a73"
        }
      ],
      "purl": "pkg:npm/file-type@16.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-type/-/file-type-16.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-type@16.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-type/-/file-type-16.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-web-to-node-stream",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78f78ae9c73511c28b121245b7f01e6cc08b2fe1a048a86eca0ad9fc62da29960479c22020409fe14694b9a072886b73724c11e1a8a7f55cd487de53d5ec581b"
        }
      ],
      "purl": "pkg:npm/readable-web-to-node-stream@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-web-to-node-stream/-/readable-web-to-node-stream-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-web-to-node-stream@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-web-to-node-stream/-/readable-web-to-node-stream-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "string_decoder"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_api_hello/nextPage.js",
            "line": 9840
          },
          {
            "location": "benchmarks/fixtures/next_index/nextPage.js",
            "line": 16392
          },
          {
            "location": "benchmarks/fixtures/next_index_2/nextPage.js",
            "line": 16392
          },
          {
            "location": "benchmarks/fixtures/next_index_3/nextPage.js",
            "line": 16392
          },
          {
            "location": "benchmarks/fixtures/next_index_4/nextPage.js",
            "line": 16392
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strtok3",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d9b5b86dbc8f48e3cc434b2c1dfeca2636a8141e5d8bd9cb2d99708289fd22b4e7fdea3796d7c3014b2acbb8d89c610564be93b1919b64cee8e24c9f4b5b927"
        }
      ],
      "purl": "pkg:npm/strtok3@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strtok3/-/strtok3-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strtok3@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strtok3/-/strtok3-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tokenizer",
      "name": "token",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3af8c5fb3e752f7a2fd0ec8053476ecec62ebced353c7ef1e2de83271fa0b9a8604e704792125d1bbb2841e4d214b58ddde7e71f289b67867c97612e5b024ddc"
        }
      ],
      "purl": "pkg:npm/%40tokenizer/token@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tokenizer/token/-/token-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tokenizer/token@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tokenizer/token/-/token-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "peek-readable",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "648dcb9f052fe673866d0cc3f5cda20c6eada217ae5d264fe5eb121c18e8a6c5c7e1d835f6ca2e7efa54180deea218b96a716d19bda584055d1f31fa47f12fbe"
        }
      ],
      "purl": "pkg:npm/peek-readable@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/peek-readable/-/peek-readable-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/peek-readable@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/peek-readable/-/peek-readable-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "token-types",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae741db843bdfb503fd20ec2801c8f450913fb06a73d0ff310515d36391420e62b248ed2c995924d74de242ad71db7009e588c081c319a52c4ec08201af2c15"
        }
      ],
      "purl": "pkg:npm/token-types@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/token-types/-/token-types-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/token-types@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/token-types/-/token-types-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isomorphic-fetch",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaf52dc09de3eaac2c1778cbc6467bdaa0a08cccac3f30df795db8d091e2199b0034161df8412ebb7e6fedd7eb27d529d00934ec3ec61929068421d3aa0ff9c0"
        }
      ],
      "purl": "pkg:npm/isomorphic-fetch@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isomorphic-fetch@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0"
        }
      ],
      "purl": "pkg:npm/node-fetch@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f"
        }
      ],
      "purl": "pkg:npm/whatwg-url@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af"
        }
      ],
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-fetch",
      "version": "3.6.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12a862154e9d68e03c9298ce5932f4a25855385de2eceac5cd26221ac10c07c19c5d2f91af36ae004457eb9c4c78d595ab103a1d71f69baf59f4b68a29d8ac7e"
        }
      ],
      "purl": "pkg:npm/whatwg-fetch@3.6.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-fetch@3.6.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-3.6.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pixelmatch",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27c07ac6a88edfbb14fe091c32096fea1e496ddf7134447b687ce97d174d995e086d00730697b897d5e66c6fb13c5ff39da720bb68df130fb01df7daabf6245c"
        }
      ],
      "purl": "pkg:npm/pixelmatch@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pixelmatch/-/pixelmatch-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pixelmatch@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pixelmatch/-/pixelmatch-4.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/pixelmatch"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pixelmatch"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "342ac21e15a69d09257c7e0cb493118d9d9af1cf34a9778c95032fdae569f48489313b79eb649b19dea7da8ab43da3e02a6ed9ea92fd1365252c8842f921cbdf"
        }
      ],
      "purl": "pkg:npm/pngjs@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pngjs/-/pngjs-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pngjs/-/pngjs-3.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor2",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cf68191640976c7f7a4b28957da78a8dfd2f9f9b63a3f0020fa35053521839a3192f9bdf92544185761c8ecfbb537544dfbf132202ce2ca7afde64ed84c3ea7"
        }
      ],
      "purl": "pkg:npm/tinycolor2@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinycolor2/-/tinycolor2-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor2@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinycolor2/-/tinycolor2-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugins",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8127cbd0ac39016d381064bb72f64e3e2ad5107518ec2032523e3b88db561d55ea99c58cb089f1e5e3f5d620ba1366c8d3500490706a07d13b82d0def19b7c3"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugins@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugins/-/plugins-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugins@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugins/-/plugins-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-blit",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6c973d99a0564e3cb63c119e1d0b6f66d7af01b43c7de43e8af344f38148bc82a4fb2d8e82b1a8d63b4140c43c07cfa8747a898731fc865f4b2db2906b4ca9d"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-blit@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-blit/-/plugin-blit-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-blit@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-blit/-/plugin-blit-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-blur",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b4bc90034ee87543d17e71703014f96b296cc38f617db7ff4901b52f69a0ee8afa725ae22610a5d5cf93d4670d8d6e9b921e3c2cb1b4e9399f05d778895f8bb"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-blur@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-blur/-/plugin-blur-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-blur@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-blur/-/plugin-blur-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-circle",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "496557c75ca2ba3e6366d3228ea51fbd53890703a27c59f4f75f28bb87eda0781e81ce5a1d65b97596d83e3bc2f5f2e9bf3ee84a5a6d365d92c6bd73c287e34e"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-circle@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-circle/-/plugin-circle-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-circle@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-circle/-/plugin-circle-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-color",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c489a14c4e41a52f316be98037a8f8b0c4566948140cba1a1878498690beafb48a284ad80d1d16415e32084e203fe374828cc3d05dca6b52d449a317ae7ed920"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-color@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-color/-/plugin-color-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-color@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-color/-/plugin-color-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-contain",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "128dc399f8b1270dcdefd95693cabfd120d86ea98ab75c524c9ebdcb2f172d8423f6cbe805bc91a529c747e9fd84ec39a4a5f2b47c145ba9d4e2ed707a01cda1"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-contain@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-contain/-/plugin-contain-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-contain@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-contain/-/plugin-contain-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-resize",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcdc933e53db4e718a0c86da0604371db13ac176c09457f11d51119ab6ea022f11debe9f40fc6909ab80f145439e27a0e5ea34e03d13f279e73485fffe2fec5e"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-resize@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-resize/-/plugin-resize-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-resize@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-resize/-/plugin-resize-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-scale",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76086cf76a8ce8c8478f41eb576a80c0a3cc92542d8cda68620001f78cac629b17b258514e23e2b2e7922042d1c19184af4274554c69518ec7809c2548880667"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-scale@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-scale/-/plugin-scale-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-scale@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-scale/-/plugin-scale-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-cover",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf4c3fd711ffbff927664a53371f84f1aedf9dab10db01c6e737bacb9a0bd9d847d54b9f36e6bc80b41796ff3f5b9ebee272756eb852776df71c1242a34d415c"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-cover@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-cover/-/plugin-cover-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-cover@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-cover/-/plugin-cover-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-crop",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14db94374395cd10a8cf1f174a03fd3322c63313471c9305b7e2c9b858e7d66bb7934550c6bcea6cdd3ac88978e9355e8e1c8085cab980bcea992087be570157"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-crop@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-crop/-/plugin-crop-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-crop@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-crop/-/plugin-crop-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-displace",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa944cf094627317cae9a3cfa8a640ebe1b30705088ad887699c3442b27ae1881ddfe02c4dcec15ebfb7ee4db1ed07320af98a5d8e21694ad222c06e8384b708"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-displace@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-displace/-/plugin-displace-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-displace@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-displace/-/plugin-displace-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-dither",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d88067527522a5d545046a75fc03ce6fe3e4149be3c4f2f1c5c256a668a93cf6cf8f5d07bb79513778d792657e229c2abadc41cbedc5f9f3474caa4a02dd92f"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-dither@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-dither/-/plugin-dither-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-dither@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-dither/-/plugin-dither-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-fisheye",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c6b944ec160f9f3a9e8a04aae62e45f82dfc82cbc208b113b0a14bec50f2b3bad4aa3099ec9b72460d6d9e3a65884bf8c9a4f69e6a2b218e5c6f7338e0208f9"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-fisheye@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-fisheye/-/plugin-fisheye-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-fisheye@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-fisheye/-/plugin-fisheye-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-flip",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b6e75468a7b18df16d18a3fac5f4b5a4ea435c9678328c826cfd55c74e8190e841af78e493490697d88b22f5ff650832f1b7e8a70486fb9e568b2f19ef1d7f1"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-flip@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-flip/-/plugin-flip-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-flip@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-flip/-/plugin-flip-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-rotate",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f58344b7b04f0057d396cd8519f281560c302d4b8aab2f84f1b0c6184b0ea87b5bba16ec8551b137658c65a0f8821e480d6bd1f9e9a698f3d61a0698358b7580"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-rotate@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-rotate/-/plugin-rotate-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-rotate@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-rotate/-/plugin-rotate-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-gaussian",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b017dbce83a627a15ccdf1b63eaba22bce0db5519e49cc3dec9b020b7ae942fd4f1d55b25bebaa585179dfe9f773c6343f61d69548df94495ada1fef59286f86"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-gaussian@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-gaussian/-/plugin-gaussian-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-gaussian@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-gaussian/-/plugin-gaussian-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-invert",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37eeabc31741fbb38247a3d88a3680fe28b35d7a1da71386bd3fec99dfe5c5e5ec67f7a6a4798514527f15a5dc621d7d4e6d387460da5dc345fdd3799e6ebec5"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-invert@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-invert/-/plugin-invert-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-invert@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-invert/-/plugin-invert-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-mask",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0059983e0e89ada54034f7d8d157c2046547e7d702efebe9de9b8351242ecbffcdafc732c2817293c6f36f05c3662634fdc92d4b0009a22467562971badff34"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-mask@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-mask/-/plugin-mask-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-mask@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-mask/-/plugin-mask-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-normalize",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d12a34adec508af9d682785a717e1c7e4336db6dd8744c672534f2e9dd3a59b91f664e5a947531f0c337c84cf0a0237412b3bba32a845919c49060be02cd45b4"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-normalize@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-normalize/-/plugin-normalize-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-normalize@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-normalize/-/plugin-normalize-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-print",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73b4e78479719bcec325e4a7c2bfd738b8c953fc21a2229863baf6d526ee2799ee1feedaefc116d6d78e6a3e6012bdb060477b42d905a86966c865d8fd8725c9"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-print@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-print/-/plugin-print-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-print@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-print/-/plugin-print-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-bmfont",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a849569268d6f4eab517d108e46b7b683f7371d1dbf6ca49096d4bfdd98f7fb2b3082109c6af27847cf9782808f5a31feefac6ff0c9a0aa76c23e232f594e5a2"
        }
      ],
      "purl": "pkg:npm/load-bmfont@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-bmfont/-/load-bmfont-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-bmfont@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-bmfont/-/load-bmfont-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-equal",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "460495e889d543d3833dd2d6279500a81a8904e837ef4373e9942d473a6dea752373cbf44adf7bb89e0f602e8dceda8849cac05da7ca3379993ccca049ed6080"
        }
      ],
      "purl": "pkg:npm/buffer-equal@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-equal/-/buffer-equal-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-equal@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-equal/-/buffer-equal-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-ascii",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53846b56c5050a5788381b0819838c2a39fd3dabec18e5f16ef606b4c3847e721dd1254db207a15e1d43c547553cba317799af704b6f98ab363267f43296b564"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-bmfont-ascii/-/parse-bmfont-ascii-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-bmfont-ascii/-/parse-bmfont-ascii-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-binary",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b19ac45e6b4c1d19d62d863b947964cc58faa6dbe140778188f2f0af86026c167a06853acb8570c3ba9c13a3bad754081a2c81a85470d94bda7fe576d2a9e58"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-binary@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-bmfont-binary/-/parse-bmfont-binary-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-bmfont-binary/-/parse-bmfont-binary-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-bmfont-xml",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1c125895319121ac50f0321e12c48c95269a98a0e58327d3fcf79b45b92f97b8dcc8e54066064e54e4ee0ab897539d9a52048e0b140dbe66225a8b07d2c2530"
        }
      ],
      "purl": "pkg:npm/parse-bmfont-xml@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-bmfont-xml/-/parse-bmfont-xml-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-bmfont-xml@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-bmfont-xml/-/parse-bmfont-xml-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "xml-parse-from-string",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12b70ac094c5e78b91cf334c5ead97e6c308cbcf3326f7cdd8399da10bf2ecf00527eb4f454eb2756b8e28d3327e63a37720504c54448bad2cd18d12c88d06d2"
        }
      ],
      "purl": "pkg:npm/xml-parse-from-string@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-parse-from-string/-/xml-parse-from-string-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-parse-from-string/-/xml-parse-from-string-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76b3c59e44098a4fcefae3caa6a4a0af6da6a6e147a8a75b4bcdf988042b502ef72f61795a46e821177adda8bfd9883a2358f389f3c5287d8d4caf9c7e096420"
        }
      ],
      "purl": "pkg:npm/xml2js@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml2js/-/xml2js-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9a58ecfbc9549c106a0a35de0f035d0b67cb24d00ff3e7e9d7406e608943b9ae9ad7f63818b13768bfda827216623c865ecdb647fa346eb7c9cfa1d1405f826"
        }
      ],
      "purl": "pkg:npm/sax@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "11.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c396c23f905131ee02ef6de71cd3fa212c6e747ee810a7caf21f3313b96f6f49ad462745d858a9e1b14c7ba227b71bdf3eaf9e9a4d0214078921b78d91dc9bc"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@11.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@11.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-11.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "phin",
      "version": "3.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1846b3a535b04d968443d4612fb372cf45b0aa295baa02da8433370f48715b09950c8e769d71326c7aa237afde970a6424185cba3f966c1bbe41f4f4ba13c67d"
        }
      ],
      "purl": "pkg:npm/phin@3.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/phin/-/phin-3.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/phin@3.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/phin/-/phin-3.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "centra",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3db14c80c4ab9a0c7abb109d9b9ed1528b3d4dcddf72532f84b4804d8377f57b03576f41f3dcd9dca03cf63998d2fc1219acf253eb9eaeac1aeadf8a6a874f72"
        }
      ],
      "purl": "pkg:npm/centra@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/centra/-/centra-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/centra@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/centra/-/centra-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "follow-redirects",
      "version": "1.15.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1637ad9821311a3a948ae7ce0465725a7c7d401a93bc45580495f92e5db4ceacf5f87c87cec84a56fc2b2235df09758ac0a0ebda7d14ce127bec3befaa0aa14"
        }
      ],
      "purl": "pkg:npm/follow-redirects@1.15.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/follow-redirects@1.15.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xhr",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fde0862dbe6bc63c797b7985d40eecfa92e547a086caa58df757efd498044799955a0d4c66696106fcbd92372c39d464f11ac8ba3a2d5b225a99fcaba7e58870"
        }
      ],
      "purl": "pkg:npm/xhr@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xhr/-/xhr-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xhr@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xhr/-/xhr-2.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2ffcb0281dd444dc17931b3e771406a684694f2e196cb0ae39bac9861538488b85ea9c19a3290d7abbe44d6cfed6be2811643c54b0cd09de0710e7289c68bd3"
        }
      ],
      "purl": "pkg:npm/global@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global/-/global-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global/-/global-4.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "min-document",
      "version": "2.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f56cb50779b77fae9b3cf994e61740e034783c1d8e7c353ff864b7c8007b210a33137b6a5da56fdb33a38256bb30419246ff79f882e63aebe12e438aeb026d09"
        }
      ],
      "purl": "pkg:npm/min-document@2.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/min-document/-/min-document-2.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/min-document@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/min-document/-/min-document-2.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-walk",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e90bd35bd9ab19e21e82b15776d422f6993b3bf9d22ba9527575b67aa52ca4de4b583ed44e38b616ac3957660b8c1a4712853d5e5fde5163690de66fa323afdb"
        }
      ],
      "purl": "pkg:npm/dom-walk@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-walk/-/dom-walk-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-walk@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-walk/-/dom-walk-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71d19e7ff76b585a32743d49b0ccee15ff35d349d997e193fb269c7366c471e7797fd463938cfe5ad1544c1bbd3e13a2f63fe37e604fbb498c118e3021d005f0"
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "process,argv,process/argv,exit,process/exit,process/env,arch,process/arch,platform,process/platform,version,process/version,hrtime,process/hrtime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/esbuild.js",
            "line": 2
          },
          {
            "location": "benchmarks/nft.js",
            "line": 1
          },
          {
            "location": "benchmarks/zisi.js",
            "line": 1
          },
          {
            "location": "dist/bin.js",
            "line": 3
          },
          {
            "location": "dist/bin.js",
            "line": 21
          },
          {
            "location": "dist/feature_flags.js",
            "line": 1
          },
          {
            "location": "dist/manifest.js",
            "line": 3
          },
          {
            "location": "dist/runtimes/node/bundlers/zisi/resolve.js",
            "line": 2
          },
          {
            "location": "dist/utils/timer.js",
            "line": 1
          },
          {
            "location": "dist/utils/timer.js",
            "line": 4
          },
          {
            "location": "dist/utils/timer.js",
            "line": 8
          },
          {
            "location": "src/bin.ts",
            "line": 3
          },
          {
            "location": "src/bin.ts",
            "line": 31
          },
          {
            "location": "src/feature_flags.ts",
            "line": 1
          },
          {
            "location": "src/manifest.ts",
            "line": 3
          },
          {
            "location": "src/runtimes/node/bundlers/zisi/resolve.ts",
            "line": 2
          },
          {
            "location": "src/utils/timer.ts",
            "line": 1
          },
          {
            "location": "src/utils/timer.ts",
            "line": 6
          },
          {
            "location": "src/utils/timer.ts",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-function",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "970ec3529d1a597620f8204237e24a91c13443645ac999d2be76419708311c1421aade6964d572e118bb1fd1a699791dbbb2d4b61b3333e4e8af5bbfda205ca5"
        }
      ],
      "purl": "pkg:npm/is-function@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-function/-/is-function-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-function@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-function/-/is-function-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-headers",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7edde20282ce07f325c1b357833cb8dd25863fab10922da342f032060ff30c5020afd6df356648523e362b0d9e24897c9048b83db804e94d596aefc7c08ef91c"
        }
      ],
      "purl": "pkg:npm/parse-headers@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-headers/-/parse-headers-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-headers@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-headers/-/parse-headers-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-shadow",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "157f264c9b82b7bff7cd7568783fea1e59b8607d9b56a06e5901d74ae04ad39e1eef01519d19db48b3d4a80c127983f7956aa9b90cc9b608a2071577f965b04e"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-shadow@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-shadow/-/plugin-shadow-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-shadow@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-shadow/-/plugin-shadow-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "plugin-threshold",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e31e46ad0af56bff4bd296810bf3196498e3823c4b62ba9299677e7be41f0043ef991c5d468439b8a12e3605e79bdff07874014e740142c398da21636be5c603"
        }
      ],
      "purl": "pkg:npm/%40jimp/plugin-threshold@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/plugin-threshold/-/plugin-threshold-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/plugin-threshold@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/plugin-threshold/-/plugin-threshold-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timm",
      "version": "1.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22365cf4a228b6e762c7c6cc6815ba42f32eabae01ac9585b35fb8574957c161906701fe2e75fcedda006217a6e1c68e12eb113fdfe0ea354342667c5ce9359f"
        }
      ],
      "purl": "pkg:npm/timm@1.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timm/-/timm-1.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timm@1.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timm/-/timm-1.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "types",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c30298cd1744944d4c05715112f0ada39b3af7d8b3147355bc02d4bfbf465cd6ec395aa5c253b195627c0eec8e1885e82cfe095bf9b7d18cae4ed7d426031130"
        }
      ],
      "purl": "pkg:npm/%40jimp/types@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/types/-/types-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/types@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/types/-/types-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "bmp",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69e23ae070f49e9ae8a5df8047be8c09cbef45a6be41c93a96808e4b4dc2924c461cde7faf7dfaa933391cf51d1ca303386cea927b953c0f3e90ad6dd37cf5da"
        }
      ],
      "purl": "pkg:npm/%40jimp/bmp@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/bmp/-/bmp-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/bmp@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/bmp/-/bmp-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bmp-js",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc7752d7d0a763787088d7646aa93ddc3be354b7db11c23c9b2b38523b96ae55f585a0e6ae8a3ca38c42ce1e300fa0c657a1f1442c9abb084746a3137c446d8f"
        }
      ],
      "purl": "pkg:npm/bmp-js@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bmp-js/-/bmp-js-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bmp-js@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bmp-js/-/bmp-js-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "gif",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cba0454c981c87d99ba2bd87db7e154a377d8b002168d7ffb77512e6aa5822cd1349b02f334d856dcdbc21a0c44e3f7ee18078ebbeaccf845c37fcf085fbb5a6"
        }
      ],
      "purl": "pkg:npm/%40jimp/gif@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/gif/-/gif-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/gif@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/gif/-/gif-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gifwrap",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbbeb46f5be92473662f367fb9b4ed367131e5602937f3d8589bd7be04beb4bd5e8134ed85ac85608410362d77e852c40dc37f232118d84706a482130fa79853"
        }
      ],
      "purl": "pkg:npm/gifwrap@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gifwrap/-/gifwrap-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gifwrap@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gifwrap/-/gifwrap-0.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "image-q",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3df24656021f29026eab7b34b530ce2adced92c89bb9411b2502184f76f2eb072d428f9176587b79fe1ebc9e4d09dc58e027cc6ef164a1c1306e5e0117c46527"
        }
      ],
      "purl": "pkg:npm/image-q@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/image-q/-/image-q-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/image-q@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/image-q/-/image-q-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "16.9.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4292dc5fd652b2add86145270f79c50d8f07ef072d021423fd314a2fc61af2fe5f326dc2157c68f334adb0b025efcd25b68628a355af2945460502bed627ebee"
        }
      ],
      "purl": "pkg:npm/%40types/node@16.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-16.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@16.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-16.9.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "omggif",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2cc253b6f81cfe7ba05e3d1572baecebc327d83d6bd337fadf454db6ab692351443bb7be3bd14fe20aacf4072705a4847a81c83e6dbcbbaaa03d1d28c84a464b"
        }
      ],
      "purl": "pkg:npm/omggif@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/omggif/-/omggif-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/omggif@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/omggif/-/omggif-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "jpeg",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46adba5c2fee4166902b26ffe6592c0930b15e1b58d3534978137e750bf9c8d61e74dd22ee262ef9f5c4a11b1f689f316738e800d1fcb27b3bad53f8184eddfd"
        }
      ],
      "purl": "pkg:npm/%40jimp/jpeg@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/jpeg/-/jpeg-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/jpeg@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/jpeg/-/jpeg-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jpeg-js",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "599cde0ce12d4ce04ae0c76c6abd08a84539b0caf7bd257646a9002335045760479d47ca1b2b305853c5c0ae44783a3ddcadc5a214876cb0238f4b355b377e76"
        }
      ],
      "purl": "pkg:npm/jpeg-js@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jpeg-js@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "png",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32ba7a76bdd44e7f9a2caf2dcbf7522842f3f8eb5dcf5bf86805f3579ab9dd40c3dab6c1e63a0a549fc2858df5d01f9e473371228bdb505d4a56b52c61d13c1e"
        }
      ],
      "purl": "pkg:npm/%40jimp/png@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/png/-/png-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/png@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/png/-/png-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d1cf3b85451984a125bfa7529502688e80f728d88ae56a1f9b18509e35f257c71606c12c3b63000e01c77b5f6f0afe6e5b8c158ab02dbd2b2a0c7c76f2a5aca"
        }
      ],
      "purl": "pkg:npm/pngjs@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pngjs/-/pngjs-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pngjs/-/pngjs-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jimp",
      "name": "tiff",
      "version": "0.22.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1352ed321e11c89b280807c0901455498c990d3b4babda7d2d48a260fd2f3ed5f2c57e018980546228532d20650908399c5d9ee0ea5083b48facb749ebabbb8e"
        }
      ],
      "purl": "pkg:npm/%40jimp/tiff@0.22.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jimp/tiff/-/tiff-0.22.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jimp/tiff@0.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jimp/tiff/-/tiff-0.22.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utif2",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa892707d147ac9ee85bb03659961a8ce72fe0570347809fa0607474f35fc5b8b818ed394519c59ade686b6dfef70df611a9eb61c4895aca5488990b32cfb7ef"
        }
      ],
      "purl": "pkg:npm/utif2@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utif2/-/utif2-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utif2@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utif2/-/utif2-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e212c1f0fcb8cd971ee6ce3277d5f3a29ab056fff218d855d4197c353982ab5efadc778adbe130553bfe95e19e2f5dc39e1db07dbaa8c153d70883b4cf8b5a63"
        }
      ],
      "purl": "pkg:npm/pako@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jquery",
      "version": "3.7.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b86afafcc8bf2498537ca6cadb14516607f21fd7888de68f67c3f3609e733e9326c326946c0329d5d81b1fa5362b4d1cac6147400d50fb0a45148b3824a4b7e"
        }
      ],
      "purl": "pkg:npm/jquery@3.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jquery/-/jquery-3.7.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/jquery@3.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jquery/-/jquery-3.7.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jquery"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 2
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "moment",
      "version": "2.30.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b849ad3616c33ab58f152fa176314205fcbd7f6628cb3469c1c97e0eaa42ead697db5173b132d055b315fd6ecfccd497eb1fdb842d73037736510e4dcc7ea1a3"
        }
      ],
      "purl": "pkg:npm/moment@2.30.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/moment/-/moment-2.30.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/moment@2.30.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/moment/-/moment-2.30.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "moment"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/function_1.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next",
      "version": "12.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3cf39916be7225c6c5051eaf541b22322e2b83d06dc1502ff1ac7d021271f994711693041c1ce39181b0c5d216eb5bdbebffb6a6e044df5f803b33a0e3ac4ed"
        }
      ],
      "purl": "pkg:npm/next@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/next/-/next-12.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/next/-/next-12.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/next"
        },
        {
          "name": "cdx:npm:bin",
          "value": "next"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "next/dist/compiled/@ampproject/toolbox-optimizer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/fixtures/next_index/nextPage.js",
            "line": 4697
          },
          {
            "location": "benchmarks/fixtures/next_index_2/nextPage.js",
            "line": 4697
          },
          {
            "location": "benchmarks/fixtures/next_index_3/nextPage.js",
            "line": 4697
          },
          {
            "location": "benchmarks/fixtures/next_index_4/nextPage.js",
            "line": 4697
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "17.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82784fb7be62fddabfcf7ffaabfd1ab0fefc0f4bb9f760f92f5a5deccf0ff9d724e85bbf8c978bea25552b6ddfa6d494663f158dffbeef05c0f1435c94641c6c"
        }
      ],
      "purl": "pkg:npm/react@17.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-17.0.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-17.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "972bb13c6aff59f86b95e9b608bfd472751cd7372a280226043cee918ed8e45ff242235d928ebe7d12debe5c351e03324b0edfeb5d54218e34f04b71452a0add"
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/loose-envify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "loose-envify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "17.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3887de8ab4b0d4425b04361327d5aafcb766c46beabf600b63f293cf7488cf0c604321536cac3f5a5cd5aab2951ee80cca0881b40b51d964ba8b57baa938118"
        }
      ],
      "purl": "pkg:npm/react-dom@17.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-17.0.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-17.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "scheduler",
      "version": "0.20.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9e59f1a002aa96146aad74c99c2f9cc230ad54f0a957bfc4901468252f7084b5dd1a0d50d681e17f6280a6be59f9e66e734a4dc9ff6d214da48179239bb100d"
        }
      ],
      "purl": "pkg:npm/scheduler@0.20.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/scheduler/-/scheduler-0.20.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scheduler@0.20.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/scheduler/-/scheduler-0.20.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "env",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9eb22063ab75ec543dc71c07de38f46ba10e890fd60c7528b37e47821b6bf9258dfe7b47210ed4a6ebd28b4bda2f36551d059a0eea4a23e9623b9bc035c0de4d"
        }
      ],
      "purl": "pkg:npm/%40next/env@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/env/-/env-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/env@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/env/-/env-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001346",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aba89b6543b6b7cf100883dac8ffdebae0d112af9a300c451394bbd0f92b2e1d224c38ffcc4860bc944a0b6f82bd763a11673aa10c14478f252f9bc25ba8e25d"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001346",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001346.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001346",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001346.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "8.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c10dba1633caa96aac2433022da934138858a486cffaece615bdb94515333b32b663b7ac8c29deabda48178b311b4d396369c9b83657489599e16e3afce1062"
        }
      ],
      "purl": "pkg:npm/postcss@8.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-8.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@8.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-8.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a064421fce1d34b67a0a2f46d2e4e39c04c8d5f017e728903fb560f7fdbb955f26245d0224700767eba17e42a3d461db4c6ce2c88d3e6f2768da2d483e9107"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zip-it-and-ship-it/benchmarks/fixtures/node_modules/.bin/nanoid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nanoid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5fca0ae84cb947bbaeb38b6e95a130eff324609b415c71e72cb2da3e321b19d03fc3196dac9bc13c0235bb354e5555346de46c5b799e6a06e26bf87c8b6248d"
        }
      ],
      "purl": "pkg:npm/picocolors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-js",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4745ef549f56bac2e2a930848860a620208ca65702908c30475d663920fd091e6ef885d8762b1e784b970950234b9e33ab090b70f367994e0e789ead52b5a10f"
        }
      ],
      "purl": "pkg:npm/source-map-js@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-js@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "styled-jsx",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a94aac5a806ab8474445ed74116f2f2e9de34f6e6cfecb06d7fa97e60678c2ed79399a6648c148daff9f5a54612dfca4039ac5b65275304f00f299bfa5e57858"
        }
      ],
      "purl": "pkg:npm/styled-jsx@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/styled-jsx@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use-subscription",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5efd9ad4fff245e02301b87294c7c5a6514a8fd1acb204f037b465713c41ba3150725a12b5634341d738838351587f714b88bf143934e2f401a6d017a05dd570"
        }
      ],
      "purl": "pkg:npm/use-subscription@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use-subscription/-/use-subscription-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use-subscription@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use-subscription/-/use-subscription-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-android-arm64",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff6f3430b7597b45b4decb40ebd88bfafe88f89d5ab1cad0e85ad70655c60ac1b3adf31a1abedfb2431ad13e40850215403e2703fe3a4105b11bffc362e14170"
        }
      ],
      "purl": "pkg:npm/%40next/swc-android-arm64@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-android-arm64/-/swc-android-arm64-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-android-arm64@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-android-arm64/-/swc-android-arm64-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-darwin-arm64",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47cbdc5c4dbf88e349d549dfe4fb6a8e4e8b456ddb8201fef1dacd924cc7e052c44241ed10b86f72627091772e8a9c900ac21a9257405e145b6669b760dd6f5e"
        }
      ],
      "purl": "pkg:npm/%40next/swc-darwin-arm64@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-darwin-arm64@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-darwin-x64",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89e033d3f2743e199b64107cf8403f246761447068805f0159a7aa47b870bde6fa49810825a0cd432d08f9937c805f212e3eb76c40f1240b3f70485d9d3abeba"
        }
      ],
      "purl": "pkg:npm/%40next/swc-darwin-x64@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-darwin-x64@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-arm-gnueabihf",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e351df61a65ea8e80e5dd3c742d1c280817282ce6e5f16d8067ba8b47a4a3c20076d00f6ed1f1b69adedd5792c5d66fb86161fa16f4444c9240ff53d6db64a2"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-arm-gnueabihf@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-arm-gnueabihf/-/swc-linux-arm-gnueabihf-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-arm-gnueabihf@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-arm-gnueabihf/-/swc-linux-arm-gnueabihf-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-arm64-gnu",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6a78092e44715713210ed71bed09f5c63cc5037b39d0423163b9a58db4822f26d4fac0723da5801d8e29c7dee278e96bdb2e12d3174f2a4437042030ca8e9"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-arm64-gnu@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-arm64-gnu@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-arm64-musl",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "841f1c2d2b7819d98ea5cc117b65332395169fa1c73bfbcb92be4e4ee36f089e71183c293d77a5564616ff4f82de0e5ac5b0d6d93ca6e12f8c4029241fd41f58"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-arm64-musl@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-arm64-musl@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-x64-gnu",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38a3b847f76282fad5bb0792c3fb813389d2772cec055e44c2451e786e0a5699086447bae19c11a67141eb96c2ea11b0c480674efe4d3129c9fb42bf5a61bbf0"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-x64-gnu@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-x64-gnu@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-linux-x64-musl",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2688618001d9bce0f7ad063bb65a7b3659afb6f607058818d31e5909e7144fa78209c97d96fea25779dfbbcd84ae4c4d9351fcf777ea1f4154a739d9fc7de94b"
        }
      ],
      "purl": "pkg:npm/%40next/swc-linux-x64-musl@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-linux-x64-musl@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-win32-arm64-msvc",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4ffde0204e9011f288278766264ef9bfd861362619850600a189b8895a354e072cb9a28b15afb330f878d39e801e21ba9fdb67d9443508513c128c9b12caac4b"
        }
      ],
      "purl": "pkg:npm/%40next/swc-win32-arm64-msvc@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-win32-arm64-msvc@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-win32-ia32-msvc",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b09ca80725daa1216d7d1fd3d13ccf63e7957a45d70ea3aad7fb98a6c7cdf60425b39036f2a265a797305fafa0725187e1a216fc42e1f88521848a4a4fa88d1"
        }
      ],
      "purl": "pkg:npm/%40next/swc-win32-ia32-msvc@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-win32-ia32-msvc/-/swc-win32-ia32-msvc-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-win32-ia32-msvc@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-win32-ia32-msvc/-/swc-win32-ia32-msvc-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@next",
      "name": "swc-win32-x64-msvc",
      "version": "12.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "681bdc6ccc2e6a70c7e0432b2f64ed84d272fb89cfe7d0629a7f1e82abfa1873158f46b8e1c53a02ee0f8ce84b36a121f65f88a51181a8c4f379cf7851d0b9c6"
        }
      ],
      "purl": "pkg:npm/%40next/swc-win32-x64-msvc@12.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-12.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@next/swc-win32-x64-msvc@12.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "benchmarks/fixtures/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-12.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "benchmarks/fixtures/package-lock.json"
              }
            ],
            "concludedValue": "benchmarks/fixtures/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/filename-reserved-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filenamify@6.0.0",
      "dependsOn": [
        "pkg:npm/filename-reserved-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/internmap@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-array@3.2.4",
      "dependsOn": [
        "pkg:npm/internmap@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/d3-axis@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-dispatch@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-selection@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-drag@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-selection@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-color@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-interpolate@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-color@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-ease@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-timer@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-transition@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-color@3.1.0",
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-ease@3.0.1",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-timer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-brush@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-drag@3.0.0",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-transition@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-path@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-chord@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-path@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-contour@4.0.2",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4"
      ]
    },
    {
      "ref": "pkg:npm/robust-predicates@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delaunator@5.0.0",
      "dependsOn": [
        "pkg:npm/robust-predicates@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-delaunay@6.0.2",
      "dependsOn": [
        "pkg:npm/delaunator@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/rw@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-dsv@3.0.1",
      "dependsOn": [
        "pkg:npm/commander@7.2.0",
        "pkg:npm/iconv-lite@0.6.3",
        "pkg:npm/rw@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/d3-fetch@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-dsv@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-quadtree@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-force@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-quadtree@3.0.1",
        "pkg:npm/d3-timer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-format@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-geo@3.0.1",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4"
      ]
    },
    {
      "ref": "pkg:npm/d3-hierarchy@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-polygon@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-random@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/d3-time@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4"
      ]
    },
    {
      "ref": "pkg:npm/d3-time-format@4.1.0",
      "dependsOn": [
        "pkg:npm/d3-time@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-scale@4.0.2",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4",
        "pkg:npm/d3-format@3.1.0",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-time-format@4.1.0",
        "pkg:npm/d3-time@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/d3-scale-chromatic@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-color@3.1.0",
        "pkg:npm/d3-interpolate@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-shape@3.1.0",
      "dependsOn": [
        "pkg:npm/d3-path@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3-zoom@3.0.0",
      "dependsOn": [
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-drag@3.0.0",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-transition@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d3@7.9.0",
      "dependsOn": [
        "pkg:npm/d3-array@3.2.4",
        "pkg:npm/d3-axis@3.0.0",
        "pkg:npm/d3-brush@3.0.0",
        "pkg:npm/d3-chord@3.0.1",
        "pkg:npm/d3-color@3.1.0",
        "pkg:npm/d3-contour@4.0.2",
        "pkg:npm/d3-delaunay@6.0.2",
        "pkg:npm/d3-dispatch@3.0.1",
        "pkg:npm/d3-drag@3.0.0",
        "pkg:npm/d3-dsv@3.0.1",
        "pkg:npm/d3-ease@3.0.1",
        "pkg:npm/d3-fetch@3.0.1",
        "pkg:npm/d3-force@3.0.0",
        "pkg:npm/d3-format@3.1.0",
        "pkg:npm/d3-geo@3.0.1",
        "pkg:npm/d3-hierarchy@3.1.1",
        "pkg:npm/d3-interpolate@3.0.1",
        "pkg:npm/d3-path@3.0.1",
        "pkg:npm/d3-polygon@3.0.1",
        "pkg:npm/d3-quadtree@3.0.1",
        "pkg:npm/d3-random@3.0.1",
        "pkg:npm/d3-scale-chromatic@3.0.0",
        "pkg:npm/d3-scale@4.0.2",
        "pkg:npm/d3-selection@3.0.0",
        "pkg:npm/d3-shape@3.1.0",
        "pkg:npm/d3-time-format@4.1.0",
        "pkg:npm/d3-time@3.0.0",
        "pkg:npm/d3-timer@3.0.1",
        "pkg:npm/d3-transition@3.0.1",
        "pkg:npm/d3-zoom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.13.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/utils@0.22.12",
      "dependsOn": [
        "pkg:npm/regenerator-runtime@0.13.9"
      ]
    },
    {
      "ref": "pkg:npm/any-base@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@5.7.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/exif-parser@0.1.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.3.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.3.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/readable-web-to-node-stream@3.0.2",
      "dependsOn": [
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/@tokenizer/token@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/peek-readable@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strtok3@6.3.0",
      "dependsOn": [
        "pkg:npm/@tokenizer/token@0.3.0",
        "pkg:npm/peek-readable@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/token-types@4.2.1",
      "dependsOn": [
        "pkg:npm/@tokenizer/token@0.3.0",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/file-type@16.5.4",
      "dependsOn": [
        "pkg:npm/readable-web-to-node-stream@3.0.2",
        "pkg:npm/strtok3@6.3.0",
        "pkg:npm/token-types@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/tr46@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@5.0.0",
      "dependsOn": [
        "pkg:npm/tr46@0.0.3",
        "pkg:npm/webidl-conversions@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/node-fetch@2.7.0",
      "dependsOn": [
        "pkg:npm/whatwg-url@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-fetch@3.6.20",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isomorphic-fetch@3.0.0",
      "dependsOn": [
        "pkg:npm/node-fetch@2.7.0",
        "pkg:npm/whatwg-fetch@3.6.20"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pixelmatch@4.0.2",
      "dependsOn": [
        "pkg:npm/pngjs@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/tinycolor2@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/core@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/any-base@1.1.0",
        "pkg:npm/buffer@5.7.1",
        "pkg:npm/exif-parser@0.1.12",
        "pkg:npm/file-type@16.5.4",
        "pkg:npm/isomorphic-fetch@3.0.0",
        "pkg:npm/pixelmatch@4.0.2",
        "pkg:npm/tinycolor2@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/custom@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/core@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-blit@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-blur@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-circle@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-color@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/tinycolor2@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-resize@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-scale@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-contain@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-blit@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/plugin-scale@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-crop@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-cover@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-crop@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/plugin-scale@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-displace@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-dither@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-fisheye@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-rotate@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-blit@0.22.12",
        "pkg:npm/@jimp/plugin-crop@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-flip@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-rotate@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-gaussian@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-invert@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-mask@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-normalize@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/buffer-equal@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-ascii@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-bmfont-binary@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml-parse-from-string@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sax@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@11.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.5.0",
      "dependsOn": [
        "pkg:npm/sax@1.4.1",
        "pkg:npm/xmlbuilder@11.0.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-bmfont-xml@1.1.6",
      "dependsOn": [
        "pkg:npm/xml-parse-from-string@1.0.1",
        "pkg:npm/xml2js@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/follow-redirects@1.15.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/centra@2.7.0",
      "dependsOn": [
        "pkg:npm/follow-redirects@1.15.6"
      ]
    },
    {
      "ref": "pkg:npm/phin@3.7.1",
      "dependsOn": [
        "pkg:npm/centra@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/dom-walk@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/min-document@2.19.0",
      "dependsOn": [
        "pkg:npm/dom-walk@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/process@0.11.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global@4.4.0",
      "dependsOn": [
        "pkg:npm/min-document@2.19.0",
        "pkg:npm/process@0.11.10"
      ]
    },
    {
      "ref": "pkg:npm/is-function@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-headers@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xhr@2.6.0",
      "dependsOn": [
        "pkg:npm/global@4.4.0",
        "pkg:npm/is-function@1.0.2",
        "pkg:npm/parse-headers@2.0.5",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/load-bmfont@1.4.2",
      "dependsOn": [
        "pkg:npm/buffer-equal@0.0.1",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/parse-bmfont-ascii@1.0.6",
        "pkg:npm/parse-bmfont-binary@1.0.6",
        "pkg:npm/parse-bmfont-xml@1.1.6",
        "pkg:npm/phin@3.7.1",
        "pkg:npm/xhr@2.6.0",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-print@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-blit@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/load-bmfont@1.4.2"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-shadow@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-blur@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/plugin-threshold@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-color@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12"
      ]
    },
    {
      "ref": "pkg:npm/timm@1.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/plugins@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugin-blit@0.22.12",
        "pkg:npm/@jimp/plugin-blur@0.22.12",
        "pkg:npm/@jimp/plugin-circle@0.22.12",
        "pkg:npm/@jimp/plugin-color@0.22.12",
        "pkg:npm/@jimp/plugin-contain@0.22.12",
        "pkg:npm/@jimp/plugin-cover@0.22.12",
        "pkg:npm/@jimp/plugin-crop@0.22.12",
        "pkg:npm/@jimp/plugin-displace@0.22.12",
        "pkg:npm/@jimp/plugin-dither@0.22.12",
        "pkg:npm/@jimp/plugin-fisheye@0.22.12",
        "pkg:npm/@jimp/plugin-flip@0.22.12",
        "pkg:npm/@jimp/plugin-gaussian@0.22.12",
        "pkg:npm/@jimp/plugin-invert@0.22.12",
        "pkg:npm/@jimp/plugin-mask@0.22.12",
        "pkg:npm/@jimp/plugin-normalize@0.22.12",
        "pkg:npm/@jimp/plugin-print@0.22.12",
        "pkg:npm/@jimp/plugin-resize@0.22.12",
        "pkg:npm/@jimp/plugin-rotate@0.22.12",
        "pkg:npm/@jimp/plugin-scale@0.22.12",
        "pkg:npm/@jimp/plugin-shadow@0.22.12",
        "pkg:npm/@jimp/plugin-threshold@0.22.12",
        "pkg:npm/timm@1.7.1"
      ]
    },
    {
      "ref": "pkg:npm/bmp-js@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/bmp@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/bmp-js@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@16.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/image-q@4.0.0",
      "dependsOn": [
        "pkg:npm/@types/node@16.9.1"
      ]
    },
    {
      "ref": "pkg:npm/omggif@1.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gifwrap@0.10.1",
      "dependsOn": [
        "pkg:npm/image-q@4.0.0",
        "pkg:npm/omggif@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/gif@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/gifwrap@0.10.1",
        "pkg:npm/omggif@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/jpeg-js@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/jpeg@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/jpeg-js@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jimp/png@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/utils@0.22.12",
        "pkg:npm/pngjs@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pako@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utif2@4.1.0",
      "dependsOn": [
        "pkg:npm/pako@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/tiff@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/utif2@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jimp/types@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/bmp@0.22.12",
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/gif@0.22.12",
        "pkg:npm/@jimp/jpeg@0.22.12",
        "pkg:npm/@jimp/png@0.22.12",
        "pkg:npm/@jimp/tiff@0.22.12",
        "pkg:npm/timm@1.7.1"
      ]
    },
    {
      "ref": "pkg:npm/jimp@0.22.12",
      "dependsOn": [
        "pkg:npm/@jimp/custom@0.22.12",
        "pkg:npm/@jimp/plugins@0.22.12",
        "pkg:npm/@jimp/types@0.22.12",
        "pkg:npm/regenerator-runtime@0.13.9"
      ]
    },
    {
      "ref": "pkg:npm/jquery@3.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/moment@2.30.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.4.0",
      "dependsOn": [
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react@17.0.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/scheduler@0.20.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@17.0.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react@17.0.2",
        "pkg:npm/scheduler@0.20.2"
      ]
    },
    {
      "ref": "pkg:npm/@next/env@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001346",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picocolors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-js@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss@8.4.5",
      "dependsOn": [
        "pkg:npm/nanoid@3.3.4",
        "pkg:npm/picocolors@1.0.0",
        "pkg:npm/source-map-js@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/styled-jsx@5.0.0",
      "dependsOn": [
        "pkg:npm/react@17.0.2"
      ]
    },
    {
      "ref": "pkg:npm/use-subscription@1.5.1",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react@17.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@next/swc-android-arm64@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-darwin-arm64@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-darwin-x64@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-arm-gnueabihf@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-arm64-gnu@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-arm64-musl@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-x64-gnu@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-linux-x64-musl@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-win32-arm64-msvc@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-win32-ia32-msvc@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@next/swc-win32-x64-msvc@12.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/next@12.1.0",
      "dependsOn": [
        "pkg:npm/@next/env@12.1.0",
        "pkg:npm/@next/swc-android-arm64@12.1.0",
        "pkg:npm/@next/swc-darwin-arm64@12.1.0",
        "pkg:npm/@next/swc-darwin-x64@12.1.0",
        "pkg:npm/@next/swc-linux-arm-gnueabihf@12.1.0",
        "pkg:npm/@next/swc-linux-arm64-gnu@12.1.0",
        "pkg:npm/@next/swc-linux-arm64-musl@12.1.0",
        "pkg:npm/@next/swc-linux-x64-gnu@12.1.0",
        "pkg:npm/@next/swc-linux-x64-musl@12.1.0",
        "pkg:npm/@next/swc-win32-arm64-msvc@12.1.0",
        "pkg:npm/@next/swc-win32-ia32-msvc@12.1.0",
        "pkg:npm/@next/swc-win32-x64-msvc@12.1.0",
        "pkg:npm/caniuse-lite@1.0.30001346",
        "pkg:npm/postcss@8.4.5",
        "pkg:npm/react-dom@17.0.2",
        "pkg:npm/react@17.0.2",
        "pkg:npm/styled-jsx@5.0.0",
        "pkg:npm/use-subscription@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/zip-it-and-ship-it-fixtures",
      "dependsOn": [
        "pkg:npm/d3@7.9.0",
        "pkg:npm/jimp@0.22.12",
        "pkg:npm/jquery@3.7.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/moment@2.30.1",
        "pkg:npm/next@12.1.0",
        "pkg:npm/react-dom@17.0.2",
        "pkg:npm/react@17.0.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/test@1.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-10T05:42:00Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'test' with version '1.0.0'. The application also has 1 child modules/components. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: benchmarks/fixtures/package-lock.json, tests/fixtures/pnpm-esm-v2/pnpm-lock.yaml."
    }
  ]
}