{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:f28adf0a-7578-4992-af95-2d17adeeb96d",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-10T06:07:11Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "protos",
      "group": "",
      "purl": "pkg:npm/protos",
      "bom-ref": "pkg:npm/protos",
      "properties": [],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "protos/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "markdown-link-check",
      "version": "3.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b867498993b2d425569517bb0b20522741b3f345e6e2fb7efb18d7f6c3458c1eea700c4b8a768c9b3150e713b01116970bd98aefbd01867aa7b32253d604ebf7"
        }
      ],
      "purl": "pkg:npm/markdown-link-check@3.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/markdown-link-check/-/markdown-link-check-3.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/markdown-link-check@3.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/markdown-link-check/-/markdown-link-check-3.10.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/experimental/packages/otlp-transformer/protos/node_modules/.bin/markdown-link-check"
        },
        {
          "name": "cdx:npm:bin",
          "value": "markdown-link-check"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88007e25b0c41978722146afa0397d58ffc98f5d3a2b3f43127d433e0630e6bb839f47b75a08b7b0a166e79b0049d18134e401f05e7d77da90edd7aaac703cc1"
        }
      ],
      "purl": "pkg:npm/async@3.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-3.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-3.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898"
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53b55dac9167260a38c63ac7a53ceed32ac73c622676c983f796658184846a3027d892b30e10d33c6f6405379f98e6cbdb0fe781e6678a593e395f421b777b50"
        }
      ],
      "purl": "pkg:npm/commander@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-6.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "link-check",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c516e160b6860f0ede4434e26d301c97a7d7b66510d77be47b34224eab211c7746b9e41eba6831c6640c20e98962c876a7c045d3cb7cb6184343ef8400e3aadf"
        }
      ],
      "purl": "pkg:npm/link-check@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/link-check/-/link-check-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/link-check@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/link-check/-/link-check-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative-url",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e4ce82f5a8a0185cd15cb7920a74a447fe2050a2efe8082f394215e3e962ad510065899e187dddd9936ed11eef4a406f2beb382f000d8040a0bda7eaea4ecce"
        }
      ],
      "purl": "pkg:npm/is-relative-url@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative-url/-/is-relative-url-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative-url@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative-url/-/is-relative-url-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute-url",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff9d7f4ca13cf0b9a6ec6738ffc6ed725357592fa0e74c1785826af07588040194067a00751bb56977a1dfae2dfceef05c301c4c90cff0f36e34a5940d689ef8"
        }
      ],
      "purl": "pkg:npm/is-absolute-url@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute-url@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isemail",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccaaa42be3be746a9ebdcf7728db1b67f4ea4d415de3a3305a360ea0cae320c679d5e53b0ed406dd699df524104fb8bb4559ee4cf1226045875373126f10b54e"
        }
      ],
      "purl": "pkg:npm/isemail@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isemail/-/isemail-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isemail@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isemail/-/isemail-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad157ecd00fcb55172b36ea500647d594b92e225009e025270cf994522adbe5e6d29e676b796ef74d15d347056f45591e20b861e5826b19d46ec14a6db04dbb8"
        }
      ],
      "purl": "pkg:npm/punycode@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "needle",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a14bf35e7c8b895c951a889a9cb8a317d3bf45e71951fed39017e29a31ab2cce1e4215f2789c0ce8678059c7307d0f5a6b880c0992aa8403ae2da308710c5a8d"
        }
      ],
      "purl": "pkg:npm/needle@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/needle/-/needle-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/needle@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/needle/-/needle-3.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/experimental/packages/otlp-transformer/protos/node_modules/.bin/needle"
        },
        {
          "name": "cdx:npm:bin",
          "value": "needle"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0858f3618022e1385f890be2ceb1507af4d35c7b670aa59f7bbc75021804b1c4f3e996cb6dfa0b44b3ee81343206d87a7fc644455512c961c50ffed6bb8b755d"
        }
      ],
      "purl": "pkg:npm/debug@3.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "markdown-link-extractor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af43446cfd5db0cf88a81eb646ef535cb3ff1c36937413487b29585ee9ae062e97bf8b9f8c4d7f8374e7b2560bf1536a35c18019b329b50147aeb75fa19fd2ba"
        }
      ],
      "purl": "pkg:npm/markdown-link-extractor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/markdown-link-extractor/-/markdown-link-extractor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/markdown-link-extractor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/markdown-link-extractor/-/markdown-link-extractor-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-link-extractor",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "003778f69b9d335e7bb961f01d03d4497e2cb0cb2f47fc8722cc0e4790947c174af60f5960632155213a29954727a902911d201f886db1fcd4eb31020cd570cb"
        }
      ],
      "purl": "pkg:npm/html-link-extractor@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-link-extractor/-/html-link-extractor-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-link-extractor@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-link-extractor/-/html-link-extractor-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cheerio",
      "version": "1.0.0-rc.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56a47c9baf2f338e81367b99e4db6718128813f0df37471123383d9f8d0422af4d3aff746b2c4b05703c7d70b982ab854462524d1a81ab6e49b761022d1e37d5"
        }
      ],
      "purl": "pkg:npm/cheerio@1.0.0-rc.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio/-/cheerio-1.0.0-rc.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio@1.0.0-rc.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio/-/cheerio-1.0.0-rc.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cheerio-select",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6ff641b42efceb95cba782d9c9b6918dc58f9fcc40902a12b8106257daf0727a388c5fce0c14d430e14c4f265ddb15b4ccc3e0dfb37ed7688902c1365f2e1e2"
        }
      ],
      "purl": "pkg:npm/cheerio-select@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio-select/-/cheerio-select-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio-select@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio-select/-/cheerio-select-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25939203b328f6c34607cf948d283374bb68916024cb5cdbced3375912c26d9ef4ff771300d99098e751ef2da0f89d1ed965f2c32d724b8ebcb58f88aeea84c3"
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f0a11175aef4519e70aaa98eeea5d3910ecbaa2b3a98276f3ea1231a24c32039aba1ddfbf01ea312ec466920fa8af062fe83d98ac45d6f3ff66349e3631151e"
        }
      ],
      "purl": "pkg:npm/css-select@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d352b81127baf876c64a53a1a39a97d12b53bbea1f7b67c31f4b51b4168cd1fa8176906e957def0913acf0ae46f18a0ce23c78a7089fa008f8c0f446810ed47"
        }
      ],
      "purl": "pkg:npm/css-what@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "720c25bffd621508859d4f7a5d78113a1f314de7adb272620ec4dced36022c577dfbf58d908a8f4f188cffca5277c548ae15c64dfd4dcb5ab586ab95a83241e7"
        }
      ],
      "purl": "pkg:npm/domhandler@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-5.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38b113063eb0d0eb1a801c1d5e73dd37472731f17da2937af5ca3eed9adb7cf1ab7693d5341523d36b298ba07537bc0284b4223e7e02487ff326f5f0e7a8261f"
        }
      ],
      "purl": "pkg:npm/domelementtype@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf4f1cd65efad622a10c5b5f5ced380bb91374f04b8b8d73c0e665d34592f1be5e89a79b369634d0729bcedc01abe7b7bf2a96370585de63fd60b51ea88ac5f9"
        }
      ],
      "purl": "pkg:npm/domutils@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c08900af28aab7f9d5e4440aa90a68dd24e848e57d2740e76c9ab02bb5affd3adcf76cc801867816532ef893c55b50df185b7cd594c21a00c469b7df5de2f226"
        }
      ],
      "purl": "pkg:npm/dom-serializer@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5748631f87463e1f40a39a74328458e8156ab700a3873eaf2392d3f00279e47fb883dff8bdb1f1d48e787d2d17b9c94b8431c0acf40288c8c3c6368bf1f3f187"
        }
      ],
      "purl": "pkg:npm/entities@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96a8eb8e668ea009d67cc9813cbf97367ca7661dbeb30c625f7594134b38c841c8ea6f80c2b2b65193a2988465dd7ff841cb55a92f008998c5ab2386acc5dbff"
        }
      ],
      "purl": "pkg:npm/nth-check@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19876358a0e46d12e467981eb87b39358d69b89f8f5f03fbf9f1cf473d3a122aec6fdba07fa77c9245dabfa00385c38384514f3085f2c64c52b8c7f70fa34214"
        }
      ],
      "purl": "pkg:npm/htmlparser2@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-8.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "parse5",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b38f559a495a5aa23d306e13332e6583ebd6a7a76587ec55cc07d9f54b2f3f64517d8e895241532ed488f9588c8699c066864ec43a77693b8988a62855a805f"
        }
      ],
      "purl": "pkg:npm/parse5@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse5/-/parse5-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse5/-/parse5-7.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse5-htmlparser2-tree-adapter",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07beed399aeaa9f51f9d570ead4bdf74b6f3e29bb8468a4b0ffe2f9aedc750fb30c1303c387d04316f41956476074442a22651007114bbb23178fd4f775514fa"
        }
      ],
      "purl": "pkg:npm/parse5-htmlparser2-tree-adapter@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse5-htmlparser2-tree-adapter/-/parse5-htmlparser2-tree-adapter-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5-htmlparser2-tree-adapter@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse5-htmlparser2-tree-adapter/-/parse5-htmlparser2-tree-adapter-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "marked",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d1b1a886f386caf8032fc73884fe5085b2cf23b978cd696cd56cde6d5c09b85e379a4bd3401e1a29f8f8d0c73d80f61f10e0cff11a6ccff2fa8dc32e8978ad0"
        }
      ],
      "purl": "pkg:npm/marked@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-4.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/experimental/packages/otlp-transformer/protos/node_modules/.bin/marked"
        },
        {
          "name": "cdx:npm:bin",
          "value": "marked"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf887b4b965e4b767288330d74d08fbcc495d1e605b6430598913ea226f6b46d78ad64a6bf5ccad26dd9a0debd979da89dcfd42e99dd153da32b66517d57db0"
        }
      ],
      "purl": "pkg:npm/progress@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "protos/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "protos/package-lock.json"
              }
            ],
            "concludedValue": "protos/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/async@3.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@4.1.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@6.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-absolute-url@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-relative-url@4.0.0",
      "dependsOn": [
        "pkg:npm/is-absolute-url@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/punycode@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isemail@3.2.0",
      "dependsOn": [
        "pkg:npm/punycode@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@3.2.7",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/needle@3.2.0",
      "dependsOn": [
        "pkg:npm/debug@3.2.7",
        "pkg:npm/iconv-lite@0.6.3",
        "pkg:npm/sax@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/link-check@5.2.0",
      "dependsOn": [
        "pkg:npm/is-relative-url@4.0.0",
        "pkg:npm/isemail@3.2.0",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/needle@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boolbase@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domhandler@5.0.3",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/entities@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@2.0.0",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@5.0.3",
        "pkg:npm/entities@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@3.0.1",
      "dependsOn": [
        "pkg:npm/dom-serializer@2.0.0",
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@5.0.3"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@2.1.1",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@5.1.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@6.1.0",
        "pkg:npm/domhandler@5.0.3",
        "pkg:npm/domutils@3.0.1",
        "pkg:npm/nth-check@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/cheerio-select@2.1.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-select@5.1.0",
        "pkg:npm/css-what@6.1.0",
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@5.0.3",
        "pkg:npm/domutils@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@8.0.2",
      "dependsOn": [
        "pkg:npm/domelementtype@2.3.0",
        "pkg:npm/domhandler@5.0.3",
        "pkg:npm/domutils@3.0.1",
        "pkg:npm/entities@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/parse5@7.1.2",
      "dependsOn": [
        "pkg:npm/entities@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/parse5-htmlparser2-tree-adapter@7.0.0",
      "dependsOn": [
        "pkg:npm/domhandler@5.0.3",
        "pkg:npm/parse5@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cheerio@1.0.0-rc.12",
      "dependsOn": [
        "pkg:npm/cheerio-select@2.1.0",
        "pkg:npm/dom-serializer@2.0.0",
        "pkg:npm/domhandler@5.0.3",
        "pkg:npm/domutils@3.0.1",
        "pkg:npm/htmlparser2@8.0.2",
        "pkg:npm/parse5-htmlparser2-tree-adapter@7.0.0",
        "pkg:npm/parse5@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/html-link-extractor@1.0.5",
      "dependsOn": [
        "pkg:npm/cheerio@1.0.0-rc.12"
      ]
    },
    {
      "ref": "pkg:npm/marked@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/markdown-link-extractor@3.1.0",
      "dependsOn": [
        "pkg:npm/html-link-extractor@1.0.5",
        "pkg:npm/marked@4.3.0"
      ]
    },
    {
      "ref": "pkg:npm/progress@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/markdown-link-check@3.10.3",
      "dependsOn": [
        "pkg:npm/async@3.2.4",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/commander@6.2.1",
        "pkg:npm/link-check@5.2.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/markdown-link-extractor@3.1.0",
        "pkg:npm/needle@3.2.0",
        "pkg:npm/progress@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/protos",
      "dependsOn": [
        "pkg:npm/markdown-link-check@3.10.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/protos"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-10T06:07:11Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'protos'."
    }
  ]
}