{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:205b4bbe-7e1e-496c-b342-8ef31207eab5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-10T19:41:46Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "group": "",
      "name": "pnpm",
      "type": "application",
      "bom-ref": "pkg:npm/pnpm",
      "purl": "pkg:npm/pnpm",
      "components": [
        {
          "authors": [
            {
              "name": "Yeoman"
            }
          ],
          "group": "",
          "name": "yeoman-environment",
          "version": "3.19.3-tuxcare.1",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "url": "https://opensource.org/licenses/BSD-2-Clause",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/yeoman-environment@3.19.3-tuxcare.1",
          "type": "application",
          "bom-ref": "pkg:npm/yeoman-environment@3.19.3-tuxcare.1",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        },
        {
          "group": "",
          "name": "npm",
          "version": "",
          "purl": "pkg:npm/npm",
          "type": "application",
          "bom-ref": "pkg:npm/npm"
        },
        {
          "group": "",
          "name": "lookup-dummy-env",
          "version": "",
          "purl": "pkg:npm/lookup-dummy-env",
          "type": "application",
          "bom-ref": "pkg:npm/lookup-dummy-env"
        },
        {
          "group": "",
          "name": "yarn",
          "version": "",
          "purl": "pkg:npm/yarn",
          "type": "application",
          "bom-ref": "pkg:npm/yarn"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ampproject\\n@babel\\n@eslint\\n@gar\\n@humanwhocodes\\n@isaacs\\n@istanbuljs\\n@jridgewell\\n@mrmlnc\\n@nodelib\\n@npmcli\\n@octokit\\n@sindresorhus\\n@sinonjs\\n@szmarczak\\n@tootallnate\\n@types\\n@typescript-eslint\\n@ungap\\n@webassemblyjs\\n@xtuc"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json\\ntest/fixtures/lookup-project/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@npmcli",
      "name": "arborist",
      "version": "4.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8c4606550e9c168e9968af3b7d48549a6a45b1e9020adb8f0dc38645824ac0cbf1af25a15169267313a9c3ec904ae6bf20ffe3d3c45ab95a3fec7dc884ef1f8"
        }
      ],
      "purl": "pkg:npm/%40npmcli/arborist@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/arborist@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-4.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/arborist"
        },
        {
          "name": "cdx:npm:bin",
          "value": "arborist"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "@npmcli/arborist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/repository.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "@isaacs",
      "name": "string-locale-compare",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "490ecace187df83f995bd300d33918bf75578480cdc7e2f333a109fbfeb9237418f9e9d4e88b6d7bb1395d7ec45aba8b5b614de27d3a196cc19cfa02ded87669"
        }
      ],
      "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "installed-package-contents",
      "version": "1.0.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6bb9f7b4c2726eb024282e957d64f28854fe798adacce41c4e5ecd740e675b45f816b47cb52c3cac91bc119c1821b81d0fac5ee934f3aa44456da73e07ab32b"
        }
      ],
      "purl": "pkg:npm/%40npmcli/installed-package-contents@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/installed-package-contents/-/installed-package-contents-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/installed-package-contents@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/installed-package-contents/-/installed-package-contents-1.0.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/installed-package-contents"
        },
        {
          "name": "cdx:npm:bin",
          "value": "installed-package-contents"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-bundled",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c790c7ba9d12bb241c98bdeced1c7f610f2c6f0fc7ce0d2b8f8f1e374755ee17f972642ae4f5c87a2a2ba07deb695d500b5ca1dee4d8b8c4e1bc4405de22a019"
        }
      ],
      "purl": "pkg:npm/npm-bundled@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-bundled/-/npm-bundled-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-bundled@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-bundled/-/npm-bundled-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-normalize-package-bin",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f7da7e5e892f9feb53ea2de8fde04520a93c35b95662335fde7d39bd7ec92154bae6075877a45e9c1d51970a3f90be0d2e0612d74996ec018e7b0d0e5f9f48"
        }
      ],
      "purl": "pkg:npm/npm-normalize-package-bin@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "map-workspaces",
      "version": "2.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5fab2e02e9f9432ba934cf221e434f8740077510b6adbd56f8c4dd32fbc0ff68b1826a99c25ab97065018262875074f62e0ae42893005db7c0a13c4e8a0a4af1"
        }
      ],
      "purl": "pkg:npm/%40npmcli/map-workspaces@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/map-workspaces@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "name-from-folder",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaade811f70b17035f118390f072e299118a943f1649e18476d51aee19b3a51f126bb85a2f529542bbe03bac2a32385614556382dae1d602310f3f8ff2c8d468"
        }
      ],
      "purl": "pkg:npm/%40npmcli/name-from-folder@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/name-from-folder/-/name-from-folder-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/name-from-folder@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/name-from-folder/-/name-from-folder-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "8.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba5978e7934748723f63516a19a69815a2c690d30c25b6af32b1061571bf3c6ae0eb2eecbad587507af3ea0cba584047e9a90cd4ce35e1d58a08db3e22129d89"
        }
      ],
      "purl": "pkg:npm/glob@8.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-8.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@8.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-8.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        },
        {
          "alg": "SHA-512",
          "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        },
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        },
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        },
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "5.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f533c11866a4e271df199b0f068866f405a0e8da13ed04c27a14b704824006c97265bcf17d5efc40cd98ebe8bbe3538f64869f1406a2884321e4ec88ac93e0b6"
        }
      ],
      "purl": "pkg:npm/minimatch@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e7008bd0f1e33e902e9a50bc7ac2e422c15b27cec8bd7775b1cd5dc5a564c6035f45eb6d64c1d6ec01c14a5e02941d95accbe998ea22f5b074f1584142cad0c"
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-package-json-fast",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bf04ab5b2fe7548d3b912f6bf38ae621a7beace4767da9085dfdd29f58866f783d0ee34e39dd03726610b47bade5a99ac04388e239aa55a1e27b26bb337a741"
        }
      ],
      "purl": "pkg:npm/read-package-json-fast@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-package-json-fast/-/read-package-json-fast-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-package-json-fast@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-package-json-fast/-/read-package-json-fast-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-parse-even-better-errors",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c72170ca1ae8fc91287fa1a17b68b3d8d717a23dac96836c5abfd7b044432bfa223c27da36197938d7e9fa341d01945043420958dcc7f7321917b962f75921db"
        }
      ],
      "purl": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "metavuln-calculator",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5555be261582291c024c4fb4c6f0faa77b95e16a6aa1c35862dcf2bde9ea2ffbb54375f1e9f19327ee94a08a228b4edf6ee10ef54dc8232b866340981c3bf5b2"
        }
      ],
      "purl": "pkg:npm/%40npmcli/metavuln-calculator@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/metavuln-calculator/-/metavuln-calculator-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/metavuln-calculator@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/metavuln-calculator/-/metavuln-calculator-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cacache",
      "version": "15.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "555758cd7127f9c9db5e91605ace614d3ece49c7a01d598b849211f147ea9378850fa03a8f98925f52ae0537cd12fe2d749584d8fcc0e88545b5c2c2edf37dc1"
        }
      ],
      "purl": "pkg:npm/cacache@15.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cacache/-/cacache-15.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacache@15.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cacache/-/cacache-15.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "fs",
      "version": "1.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0a1b9443d0654fe32744cd19ff23804d0eec43b6a55b39d9bcebbe53e3d3881bf34685a2b4a633d7ed970396f2986c0fae96f54adf3b5f705e2e05d3b1b896d"
        }
      ],
      "purl": "pkg:npm/%40npmcli/fs@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/fs/-/fs-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/fs@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/fs/-/fs-1.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 1
          },
          {
            "location": "lib/resolver.js",
            "line": 2
          },
          {
            "location": "lib/util/binary-diff.js",
            "line": 1
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 1
          },
          {
            "location": "lib/util/repository.js",
            "line": 2
          },
          {
            "location": "lib/util/transform.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "@gar",
      "name": "promisify",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9364f2d49715a238c9170ae0fd384a8b6ba327b5cd2d868518d07f6d64fdc0647ea123091cc6b9c3e094abaa7fa55aca78d36003ba42a847234a71d5a2a25017"
        }
      ],
      "purl": "pkg:npm/%40gar/promisify@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@gar/promisify/-/promisify-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@gar/promisify@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@gar/promisify/-/promisify-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.3.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "425613b9c51839ec2cf96784ba30e8106ce2cf82ba738ed5fc177e2e349261c03de29f8398835d7fb9dc6948a74e17ef672bb5de537d398d570f1b7c0b44f0d2"
        }
      ],
      "purl": "pkg:npm/semver@7.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-7.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-7.3.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/composability.js",
            "line": 2
          },
          {
            "location": "lib/environment.js",
            "line": 15
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 4
          },
          {
            "location": "lib/util/repository.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268e9d274e029928eece7c09492de951e5a677f1f47df4e59175e0c198be7aad540a6a90c0287e78bb183980b063df758b615a878875044302c78a938466ec88"
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "move-file",
      "version": "1.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5251ffc28361b3183c9a7f5e5a47d4adf535a56fe5ef6d95d6a43c7c60ab3b30bccc1ff0427a8a6ffb2f6fcebce091fca4086b963a54aede66618f6f8541cae"
        }
      ],
      "purl": "pkg:npm/%40npmcli/move-file@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/move-file/-/move-file-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/move-file@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/move-file/-/move-file-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf"
        }
      ],
      "purl": "pkg:npm/mkdirp@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320"
        }
      ],
      "purl": "pkg:npm/rimraf@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "minimatch"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        },
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chownr",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c8a26b43179286a5da2090b77d56ca6f17393d29fa72c86952f18155665ed318f0472f9b2720e9f17ac8705603ed790f5be04c9d97ea556c8c84d4372f09681"
        }
      ],
      "purl": "pkg:npm/chownr@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chownr@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-minipass",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57f26038b1424be47a55cab4b250ae69e58474d0b7a2e0e524c348b1a707d95b402e2bbd995e0b3eb1dce5c0e5f24e5ac3a27c8f08165a9893a39458866233be"
        }
      ],
      "purl": "pkg:npm/fs-minipass@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass",
      "version": "3.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aedcb9929c3dff3f125fd766c5b94503a79d22d526c0980c7980d946bc25215376ee2f20cac19bce7270520830d95fc556a1520dd5b2d38d193d2f35d43600a9"
        }
      ],
      "purl": "pkg:npm/minipass@3.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass/-/minipass-3.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass@3.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass/-/minipass-3.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "infer-owner",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "202963f97cfde3e77b8ab1f9a91c9f2689ce75f4f3b836a27c4e993d67f1d0dd3efc04d909bb933eada9ac5979dbabab91077dd16c942888750df050da1333f4"
        }
      ],
      "purl": "pkg:npm/infer-owner@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/infer-owner/-/infer-owner-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/infer-owner@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/infer-owner/-/infer-owner-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-collect",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e93ea51f41fc386f642139bf266ead768a086e8806f5ed2d2e0a58ea6a615d29bf03dbbc36ad6bc811be42ca62b9bf4b8d69413ec3d2ded590fc1a2dab815dc4"
        }
      ],
      "purl": "pkg:npm/minipass-collect@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-collect/-/minipass-collect-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-collect@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-collect/-/minipass-collect-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-flush",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "266412618a4f52a5f92729f5997691c0e75ad6e43c1cfe4a013fe80d22c2cedd41611850534fe10edb01d6e7d97c4133319f5a0159ac070f3e156b085e50a55b"
        }
      ],
      "purl": "pkg:npm/minipass-flush@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-flush@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-pipeline",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6e22aedc20eb74f513d1275f60762e1bf9188dbc31587b9247fa080dbc1a86aa941772bbb73dc466399b8704a58ad53c5ff7e710f8731537877acf8e8b64fec"
        }
      ],
      "purl": "pkg:npm/minipass-pipeline@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-pipeline@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-map",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdb8ceaa68044c1601e41a0478655e6bc766bc76f69bd18bcb513d5b8df27b27cfe9040264614d6be5d171e244b8307aceaafe80aa4802694b79b329ca4c3f31"
        }
      ],
      "purl": "pkg:npm/p-map@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-map/-/p-map-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-map@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-map/-/p-map-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aggregate-error",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e08ed3774d6ab96fd1a6871f35ac85745564d6a4aea21d04ec9adb449d7a9c7d351e128543cf0836af5277e9ddef6cea4724a5afd0660c0f3194427abc932b60"
        }
      ],
      "purl": "pkg:npm/aggregate-error@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aggregate-error@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-stack",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1d882f4769313e29100c5a10e1ac63840a0599c687af31ce5396439b32a352b1553ad8f6335d9fd23138f3c8600517562eb20c46712593117061a7408fc10d4"
        }
      ],
      "purl": "pkg:npm/clean-stack@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-stack@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11d0c366ee00d8ec882bb2ebff6cc6fb0e6399bba4d435419c4c11110bc1ceca412640846d16bc1b153596085871a1890a745689b8c35e5abbefd5f5ff2e71c2"
        }
      ],
      "purl": "pkg:npm/indent-string@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-inflight",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98472870bf228132fcbdd868129bad12c3c029e3"
        }
      ],
      "purl": "pkg:npm/promise-inflight@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise-inflight/-/promise-inflight-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-inflight@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise-inflight/-/promise-inflight-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ssri",
      "version": "8.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7ba92873cb5022cb1bcf34890b5a81ae6bbc68433ccf8d0d07007e01d2b58aa3b499e944ae3dcad488016bc2cd141fc46b6d69a0ab72cc4ce6e13c81db6c179"
        }
      ],
      "purl": "pkg:npm/ssri@8.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ssri/-/ssri-8.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ssri@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ssri/-/ssri-8.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar",
      "version": "6.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a7fca650cd052464292ea0003ae2133dd97d14adbe95a51840165943cf3e3853699c0f9b1c993df305ce15815a64ba0179f34f83427f1e0054b2a10b74b739c"
        }
      ],
      "purl": "pkg:npm/tar@6.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar/-/tar-6.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar@6.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar/-/tar-6.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minizlib",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c0c6c47c0557e3eb40d65c7137bb7d281f37e5e06ee48644ae3d6faabe977b8c54479bb74bc4e8d493510700227f8712d8f29846274621607668ee38a5ed076"
        }
      ],
      "purl": "pkg:npm/minizlib@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minizlib@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-filename",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "566a748c8a76967df95135eeaf2be3ce48c6751c9ff5bda54d7b9261488f9b345c977143b58a80c0e9d3264027803f525a19e82730db4cac1a3ab67e493b7135"
        }
      ],
      "purl": "pkg:npm/unique-filename@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-filename/-/unique-filename-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-filename@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-filename/-/unique-filename-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-slug",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce85abf4e6dac402c3dc338f7e33d2ab1b787e766259b9711c881e5aa5bcc7b52a0f312d1c440bce38b672e258405094e8a9a826290e600665ad31c779b8f1db"
        }
      ],
      "purl": "pkg:npm/unique-slug@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-slug/-/unique-slug-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-slug@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-slug/-/unique-slug-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pacote",
      "version": "12.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09d604974dc90eb44edf1d7cb878c1600f53ca85bc832f93855732a5c0e4c4fb4a970efa7b87a385807a8bd949fbf71e6db8e9a8f5bf0a28e3ab1c034edb3c3b"
        }
      ],
      "purl": "pkg:npm/pacote@12.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pacote/-/pacote-12.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pacote@12.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pacote/-/pacote-12.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/pacote"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pacote"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "pacote"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/composability.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "git",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe10455ff406d5bf8decf64116cd1b8be7af81165c2bd9d607140a6641a85d44f98494b097973877bcbcfe19be3506513e143aed1cc56a3e5433d61ec8aa2bcb"
        }
      ],
      "purl": "pkg:npm/%40npmcli/git@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/git/-/git-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/git@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/git/-/git-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "promise-spawn",
      "version": "1.3.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "432006628fc56e3e0c5de19d25c17367e1640e4a267d106b3ccfbd41825283e3f180050bf8b537167790937eeb291dbfce3aa4095d412c771c5fdf304571b74a"
        }
      ],
      "purl": "pkg:npm/%40npmcli/promise-spawn@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/promise-spawn/-/promise-spawn-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/promise-spawn@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/promise-spawn/-/promise-spawn-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-pick-manifest",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "741b1d06d3914fce12f15f144da7755a553228863d88cb009aac476cb75e11e04d30b403943596adadf0614c7d101108886fd8c00cb45f23470ddda0a00b1fb8"
        }
      ],
      "purl": "pkg:npm/npm-pick-manifest@6.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-pick-manifest/-/npm-pick-manifest-6.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-pick-manifest@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-pick-manifest/-/npm-pick-manifest-6.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-install-checks",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3d3a6c8390d2d8c2a28f3a76c8f1ec62399536195566429eed81ecf604f8b93990bc33cd9e943029b3bb310b897ffee494b68b56aa81080f08d1bd61f8ab3f3"
        }
      ],
      "purl": "pkg:npm/npm-install-checks@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-install-checks/-/npm-install-checks-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-install-checks@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-install-checks/-/npm-install-checks-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-package-arg",
      "version": "8.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e1819ae0d27d1582fcd57529b5a22670a2b3db4f16075090a0b6c256f261af943a714ccd6f4897379b94197949210072336f3dd508777f478a2c8b52f54e0fd"
        }
      ],
      "purl": "pkg:npm/npm-package-arg@8.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-8.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-package-arg@8.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-8.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9320ae10e5a326a66e0db447ccbf15f77373421c0807bd681564b2cd5a3e28f648fa99d03cfc6e71d92b399be42d19eb7f9511b1033e209d3d0f0dbd71100b20"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-name",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fa912d81eb7d0c74afc140de7317f0ca7df437e"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-name@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-name@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtins",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b980636a45a2a5f68efdb5c8ec4f2baba929c074592b970d62b52fd8ecd9488fc5be674cc97276b46f5d29c8c40b9607987a54030b1aae058864d59dc5bfdb9d"
        }
      ],
      "purl": "pkg:npm/builtins@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtins/-/builtins-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtins@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtins/-/builtins-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-retry",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbe58a165051f011979ec3652071463d99b20dfdc314ca0b85a7e5027c99815eab1bac6ef89c1eb13a3643d47a5f0626b66c001429009377b7e6311da1e87fde"
        }
      ],
      "purl": "pkg:npm/promise-retry@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise-retry/-/promise-retry-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-retry@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise-retry/-/promise-retry-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "err-code",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9b9a546934a0714ff09198f3a5c88490a4d8fea92798bdcca6fee4f4271d9b30e94a2ed4b2d5998bb95c5210a2b2a2bfcde7286fa7f6621b5a04dc311831214"
        }
      ],
      "purl": "pkg:npm/err-code@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/err-code/-/err-code-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/err-code@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/err-code/-/err-code-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "retry",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b42a6266a21f07421d1b0b54b7dc167b01c013b"
        }
      ],
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/node-which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "run-script",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d26a7fcfbb5d714bf4dd693a530743119fd82ec0653c7727bec79ea611580111dfd0b326c16d87002f4a613d78bc48658510286441de8cf6a2f8cba54ea458a"
        }
      ],
      "purl": "pkg:npm/%40npmcli/run-script@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/run-script/-/run-script-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/run-script@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/run-script/-/run-script-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "node-gyp",
      "version": "1.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e7921c3e7e65fae6488baa4e84dc114b5cd0b6eab5212bdd335707b6ca770f962553fd0a2cdf18e14cb139f437fc2a73e5730204457295954d5b5e8510fa588"
        }
      ],
      "purl": "pkg:npm/%40npmcli/node-gyp@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/node-gyp/-/node-gyp-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/node-gyp@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/node-gyp/-/node-gyp-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-gyp",
      "version": "8.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a254c946052d01bfe13971b413ddf0643b3962226581b5f14f0400147c8d951b1742763351a17668682e8d96f0fa147c685e191bfad24f9edb58c583d7a8ebf7"
        }
      ],
      "purl": "pkg:npm/node-gyp@8.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-gyp/-/node-gyp-8.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-gyp@8.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-gyp/-/node-gyp-8.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/node-gyp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-gyp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "env-paths",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa1d6590b2a164c4d88e8835544a49346ecd64959cb9cd830e4feab2a49345108e5e22e3790d5dd7fb9dad41a1a8cc5480097028d67471fdaea9a9f918bb92d8"
        }
      ],
      "purl": "pkg:npm/env-paths@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f41ca1b2c4767cf56c3598f8efca9451b29f98bd3eb790435728d286dc9964b88aed90c002b1457e8a723938f4334e70136b493e2b00e224e79d79766283ef38"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-fetch-happen",
      "version": "9.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb3a29c03cbb0cd9279b03d0a657a6e650195ff7823b34af48d35c48a9b9795c1390e073a24b447d7b1af4bdb727f188461c51b1ac7390f121ac91291361781a"
        }
      ],
      "purl": "pkg:npm/make-fetch-happen@9.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-9.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-fetch-happen@9.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-9.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "agentkeepalive",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "667e1cc36344a9dfbd7e249558cb1c9e3c90d5af187e8739a016a32dea39c3e6011e00d4704058da14b86294f3ea23797ffdb342292d72e33ab52f31d69f5da4"
        }
      ],
      "purl": "pkg:npm/agentkeepalive@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/agentkeepalive/-/agentkeepalive-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agentkeepalive@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/agentkeepalive/-/agentkeepalive-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d15851ee494dde0ed4093ef9cd63b25c91eb758f4b793ae3ac1733cfcec7a40f9d9997ca947c520f122b305ea22f1d61951ce817fbb1bfbc234d85e870c5f91"
        }
      ],
      "purl": "pkg:npm/debug@4.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 2
          },
          {
            "location": "lib/command.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 12
          },
          {
            "location": "lib/generator-features.js",
            "line": 1
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 1
          },
          {
            "location": "lib/package-manager.js",
            "line": 2
          },
          {
            "location": "lib/resolver.js",
            "line": 6
          },
          {
            "location": "lib/store.js",
            "line": 1
          },
          {
            "location": "lib/util/namespace.js",
            "line": 1
          },
          {
            "location": "lib/util/out-of-order-transform.js",
            "line": 2
          },
          {
            "location": "lib/util/repository.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ede98f4e5e83a68e894573978cb471724f8594b457e7ce3b70b2849f4d0f2c081cde0da14d9660afe7b8736bfa4294a62de14fde7e72528edfb7a6af04aff98d"
        }
      ],
      "purl": "pkg:npm/depd@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "humanize-ms",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c46e3159a293f6b896da29316d8b6fe8bb79bbed"
        }
      ],
      "purl": "pkg:npm/humanize-ms@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/humanize-ms/-/humanize-ms-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/humanize-ms@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/humanize-ms/-/humanize-ms-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-cache-semantics",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71aacf92571487b44e5912bb0afdbb44fb5d858854b1e95afee7b9fe32b38de815bd70ea33620b13d4360469fd259261d60f3b729e7ab2efc58104b37164bc71"
        }
      ],
      "purl": "pkg:npm/http-cache-semantics@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-cache-semantics@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-agent",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "934cdd360a964c603a69e211569bdf5686f87cbe767537da7a1ca583463852f4b24af3aafd8f813b23eb82952b03b1f296abd4f2f2191ac46e5e6b29b245744e"
        }
      ],
      "purl": "pkg:npm/http-proxy-agent@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-agent@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tootallnate",
      "name": "once",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45bcc9be5373991ab97373b4f548a97ae5e7a38b40d4513a8a43a3c592b4b6ec55bf7e35da5eb8979b755b9a63e3eac9abdbe9926fe4c22474eda6579ec28fc7"
        }
      ],
      "purl": "pkg:npm/%40tootallnate/once@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tootallnate/once/-/once-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tootallnate/once@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tootallnate/once/-/once-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "agent-base",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d"
        }
      ],
      "purl": "pkg:npm/agent-base@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-proxy-agent",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0"
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-lambda",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d9877899e6a53efc0160504cde15f82e6f061d5"
        }
      ],
      "purl": "pkg:npm/is-lambda@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-lambda/-/is-lambda-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-lambda@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-lambda/-/is-lambda-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-fetch",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0861f579b94bab6e98d79f80ce4edecb8c61d09fd77c97eb0a8c792c32622aa2364368b038b38aae598868e0e24904bc775f236a517acb62b678f526d0299287"
        }
      ],
      "purl": "pkg:npm/minipass-fetch@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-fetch@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-sized",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31b9104360938813250360e6ff9718fbd49614437ca73cce5e2eab94ce57c6ad18a9b75ae59432f6c53be5aebbdc513d64ad19b1bafa63988feaef6792d7e0da"
        }
      ],
      "purl": "pkg:npm/minipass-sized@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-sized/-/minipass-sized-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-sized@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-sized/-/minipass-sized-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encoding",
      "version": "0.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11305aba8c354f7e58fd664c922a3d8e2334679c631c7989e179a364eab597f757cf796bdac467f3b9c9cb6d11ba9a928751769b71c73d2a7c4a120f409ac9dc"
        }
      ],
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8452ca863cbb0cfa3ff37428598ec9d7e758385eb1c53885f07e70953c695093f9398226a470ab2ec4239b051bba0d29bda29c3f3bab2559b25d82140ce1b06"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socks-proxy-agent",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c16a898636f7d90e86b2b52acee164ba4c5bff3ce275ee6ab9761c315a488f16a50c1058cb69ea282150ffdf887b876f39849074e93785495949dcd939ddf331"
        }
      ],
      "purl": "pkg:npm/socks-proxy-agent@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socks-proxy-agent@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socks",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc36611e165163d3f146bb91311ee43219dfdc8f210ece12ddff5179c7e71b1bdc04741c29c207fe851c1167dfb1f9755f1758940ee79e519b6d3bcfcfd0fc80"
        }
      ],
      "purl": "pkg:npm/socks@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socks/-/socks-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socks@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socks/-/socks-2.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ee1313d8522bbaa8c0506f8974e9e726e93eae8f386687e31e25c5bdc1af3d3e8033e69bdde333e0379589575d3899be92d93d40c0d200681ef424dacb41686"
        }
      ],
      "purl": "pkg:npm/ip@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip/-/ip-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip/-/ip-1.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "smart-buffer",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7884ad0787cacfa90976c577371ec681a0e5ca576d0c4e83e4717bf06c84962c4b3eeb8b01ab9905827da42431dbd4faf2f72acfd1dc6b088f5145c8bb4572a"
        }
      ],
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/smart-buffer@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4db8faeeb7dfa9c79e2e97115eb4fbbca00df02c1f3de20180cec4ea206498a2d5edb10cc291a060b1afd2300252c10269afefbb13f42231289edeae99d320b5"
        }
      ],
      "purl": "pkg:npm/nopt@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-5.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1"
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "6.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fef06fcf925fafd753fda15677414845ff93fd0d9606c2c437281468552ab2daacc9c99900ffede41bc52532b4be2166494c6250a4d4a655b2e6fb7eaef288c6"
        }
      ],
      "purl": "pkg:npm/npmlog@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npmlog/-/npmlog-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npmlog/-/npmlog-6.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "npmlog"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 14
          },
          {
            "location": "lib/util/log.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-we-there-yet",
      "version": "3.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d065a9bf9d1848e70b5da37afc500a637bdf45b9655d6576c6f7c0fe828917ca731615973d5fb28e12570c16e3b1c0d8a30bfb630d40dee8a0a739f9884193cb"
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-3.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "are-we-there-yet"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 17
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delegates",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d"
        }
      ],
      "purl": "pkg:npm/delegates@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delegates@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "readable-stream"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 19
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        },
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-control-strings",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1"
        }
      ],
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-control-strings@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gauge",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fd9be0443798e483a6b47d98e57a2763379d551355fe98f150d83274bafd55dfda022c26ec19eeb28db067a7b78aef3ffe180a27f7d6b79c7baa6eebad8723e"
        }
      ],
      "purl": "pkg:npm/gauge@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gauge/-/gauge-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gauge@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gauge/-/gauge-4.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aproba",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9587b81b1ed04fe30a19b0ec03e67e85efd6b5e7f4062c033a52bf5e406b75fb21f49fe33cf5db5f4b44f71f5c976ed39aee608374146d4ad061aff2f8a3873d"
        }
      ],
      "purl": "pkg:npm/aproba@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aproba@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aproba/-/aproba-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-support",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246"
        }
      ],
      "purl": "pkg:npm/color-support@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-support@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/color-support"
        },
        {
          "name": "cdx:npm:bin",
          "value": "color-support"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-unicode",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e0e6fe6a28cf51138855e086d1691e771de2a8b9"
        }
      ],
      "purl": "pkg:npm/has-unicode@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-unicode@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a"
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-packlist",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ff71bce6bad030208e6095471fd83051358fddd1315de1efc59da66280957a243f394476572451b00a77633168a25628964ac5added88e2e92370724e721d15"
        }
      ],
      "purl": "pkg:npm/npm-packlist@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-packlist@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/npm-packlist"
        },
        {
          "name": "cdx:npm:bin",
          "value": "npm-packlist"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore-walk",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af30d02da5b88d06e1d98ace16525d0ad5fcaa02537a1151622501dabd68b2a4de0f357fdfe261f1fcf5a003f351385fde292ef03b38203a9ac08e5df2652243"
        }
      ],
      "purl": "pkg:npm/ignore-walk@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore-walk@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-registry-fetch",
      "version": "12.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0dfe504f745a2675d8b8ec2d5c15d2f415acfad1c7da896f9022e1ea3711fdbfeedc3bcf325a772744efbd8c2994f2b11cc3b07e0dbcecf62287d42a69516828"
        }
      ],
      "purl": "pkg:npm/npm-registry-fetch@12.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-12.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-registry-fetch@12.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-12.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-fetch-happen",
      "version": "10.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe2283951405d1f931c81ff0fddb96db2458ac6c0171b2630b7ee28e08b40a6399df66f331cf3a0424920075afbb2445081e34f2204fce24d2cdacc14ab2a8df"
        }
      ],
      "purl": "pkg:npm/make-fetch-happen@10.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-10.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-fetch-happen@10.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-10.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cacache",
      "version": "16.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e4e1a424c025bcd80e2318a16f70691016a65c32ca5f3fd616abd3ebf3bfe5743be559fef5f33788e8a58274ab7f8de8a1bba072b4745489c24f0752b693c11"
        }
      ],
      "purl": "pkg:npm/cacache@16.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cacache/-/cacache-16.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacache@16.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cacache/-/cacache-16.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "fs",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e67c1bcd5c669eb4cc63f4b4e9f0d00df6f122757511adfe594ec950cc4022ffa19b5bee328da2c541ce93b9ee5ca59f45ae5938381a3f4a77f5061fd2eea4d"
        }
      ],
      "purl": "pkg:npm/%40npmcli/fs@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/fs/-/fs-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/fs@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/fs/-/fs-2.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 1
          },
          {
            "location": "lib/resolver.js",
            "line": 2
          },
          {
            "location": "lib/util/binary-diff.js",
            "line": 1
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 1
          },
          {
            "location": "lib/util/repository.js",
            "line": 2
          },
          {
            "location": "lib/util/transform.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "move-file",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "511e83e5fe0a10658957a0463c7dd06f612d807fadfb55d0d53b7ce5ceea89c37a71ecf3b873dd670c00c6a66be092ed9d0bb42d9b13cdaff98263664a5f172e"
        }
      ],
      "purl": "pkg:npm/%40npmcli/move-file@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/move-file/-/move-file-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/move-file@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/move-file/-/move-file-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "7.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "050ba14313ee465efd279cd25d13feb8dccf3b2670da8148f492d143cd17b304af836d4a30a36d4336bd785e36adf23fdd9e3446fcc175783388492e7738e8f0"
        }
      ],
      "purl": "pkg:npm/lru-cache@7.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-7.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@7.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-7.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ssri",
      "version": "9.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39ed6727eba8cc42f7c71b516561b59e6565bf7476612578e921c4df5e5757124e67cf9952b4fa3798ad0e2507c647745b65495b2127b16e58e4273b848fff1"
        }
      ],
      "purl": "pkg:npm/ssri@9.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ssri/-/ssri-9.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ssri@9.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ssri/-/ssri-9.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-agent",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f6858f18768444d62eebe8cd30f43230e468193741b6e4ff332c2450f2b8d7b53537bec345048fef58afd421e13a839314533e9abf000f5e62fa172f43ffdd3"
        }
      ],
      "purl": "pkg:npm/http-proxy-agent@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-agent@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tootallnate",
      "name": "once",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c2b8a14fe4f4b9e609cc56edddb72f0a3dab4ba94a32fd96330f3006090f093450a42d7ce623bbcd1c247e5e96d968c5902bfbd0b9bafb3e462af20e3bd09fc"
        }
      ],
      "purl": "pkg:npm/%40tootallnate/once@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tootallnate/once@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-fetch",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fd5385150465c4cb25899ea60308ba753f00fc5c8909e1a90d1e9d5a19523ed989bbc10325c432a2e0807825b9b253ea65f6912cfdc56b2ba70ebaf99b2b84a"
        }
      ],
      "purl": "pkg:npm/minipass-fetch@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-fetch@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minipass-json-stream",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "383a98d7c519b7f23c93e6fbae5d8010d81b584f080d86a6fae9dd20938dbe2800cfc291e4659b96c15311f42cd16383b236d25d6966f891c4bfc1abe937dd6e"
        }
      ],
      "purl": "pkg:npm/minipass-json-stream@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minipass-json-stream/-/minipass-json-stream-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-json-stream@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minipass-json-stream/-/minipass-json-stream-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonparse",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f4dae4a91fac315f71062f8521cc239f1366280"
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@npmcli",
      "name": "package-json",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cba8e7bbbe84f42db7a2ccfc8043016b2666699ebdbc538893cbd1d4524bff06c4279e3ef5a546f6b2d38d02925df818644af9d27c35b7104115f05965ef9b62"
        }
      ],
      "purl": "pkg:npm/%40npmcli/package-json@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@npmcli/package-json/-/package-json-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/package-json@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@npmcli/package-json/-/package-json-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bin-links",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6fc7eca9cd58404af1d34ba2be61219fee7c10740368cfbbfa3130b4682b589ce119f3b62f31ff35698ef7ec46671997696d1337b1f5a33bda1690a9ae22fc9"
        }
      ],
      "purl": "pkg:npm/bin-links@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bin-links/-/bin-links-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bin-links@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bin-links/-/bin-links-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cmd-shim",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa40ad679f4189d7c4c0796d9c9c24c95667f974288dd03248cd43d6049e875d59e295b52a9a25932a39dcbe67a1cd27af1988bf21704e6251a38c6cec514b3f"
        }
      ],
      "purl": "pkg:npm/cmd-shim@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cmd-shim/-/cmd-shim-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cmd-shim@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cmd-shim/-/cmd-shim-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp-infer-owner",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1daad885b7796439a62f4d74912148e421d3d373182fe7e7e0a9813fe6a830770d7670eac0bb3ce0cef544c48907fee975a1e1cdddb08b396486dd73aa6ca2b"
        }
      ],
      "purl": "pkg:npm/mkdirp-infer-owner@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp-infer-owner/-/mkdirp-infer-owner-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp-infer-owner@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp-infer-owner/-/mkdirp-infer-owner-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-cmd-shim",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2900d58c6aa1664f763cf3518fd6445c4baa83c6d4a1b48a470faad184374ca239c6471eedb509a1b2f867f3ad8846c002fef4c84a58217a78890f4bf283d5a2"
        }
      ],
      "purl": "pkg:npm/read-cmd-shim@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-cmd-shim/-/read-cmd-shim-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-cmd-shim@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-cmd-shim/-/read-cmd-shim-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d2294c6001bca2a2bba4ea153ced0cd56d8dbbf68613eae8b0803a2e8ed8768eee2627e4d96aeed240186d6d3994cae3584ee5e74b2467eba155d3e78281cad"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "common-ancestor-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f7b07468d695d712a5fc554dbc91f81463e606b24d3d84fa9989998b69c3626fa5cd4c233cb9b61e4fbaf25d0c3c6ac075b0a81c53996407b38dba0d3c681f3"
        }
      ],
      "purl": "pkg:npm/common-ancestor-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/common-ancestor-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/common-ancestor-path/-/common-ancestor-path-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-nice",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e59e51156eb7cb145e27bbc03605ba79914659a42f9cf13758d999a0e26b4a41a3bb67ad280d8be6bace6b5b26f3bed355316de7b03cd011f56c0adc9a52df3f"
        }
      ],
      "purl": "pkg:npm/json-stringify-nice@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-nice/-/json-stringify-nice-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-nice@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-nice/-/json-stringify-nice-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-conflict-json",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c36d119bd344c03c5b0a582a5964e4fddd2c553fd9ce34e4a0112dc07afa91abf087bdabc406f2808f15fda796391744592f11fd51f77df91c2d0ac6be9450c"
        }
      ],
      "purl": "pkg:npm/parse-conflict-json@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-conflict-json/-/parse-conflict-json-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-conflict-json@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-conflict-json/-/parse-conflict-json-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "just-diff",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8677a17e7886784fde448a73fcb9b20d1a46c4cb78eb801ca6fba2e35be8dad541b559021c11c43a14b7b25ed549660964f9b8fb7ef127f82bb62c1c6482261"
        }
      ],
      "purl": "pkg:npm/just-diff@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/just-diff/-/just-diff-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/just-diff@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/just-diff/-/just-diff-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "just-diff-apply",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76015e9d99ccb1cd7118daa076d82787b0caf8ecb7e76084dd564b6f371b429b01b3d888d8adccd0846b76044467bd9e22d4e36e5d2cb91caf29175541af466c"
        }
      ],
      "purl": "pkg:npm/just-diff-apply@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/just-diff-apply/-/just-diff-apply-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/just-diff-apply@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/just-diff-apply/-/just-diff-apply-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proc-log",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68293c00ee75b3ee09cae60683743f6ba827ae50ced3d36955678fb63a7bc70a61728434e31e5601f0b2ba072c6cba2859c309f3b08b903e3eeb4e0872411d86"
        }
      ],
      "purl": "pkg:npm/proc-log@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proc-log/-/proc-log-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proc-log@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proc-log/-/proc-log-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-all-reject-late",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bee7f42dfd253b1c904441fb18320e50c2d2ee4cfe82cf22e81f988bc742ebc6b6b327211ab1d32588213010fa93b794707d07e4fef711c902038f318a35aa5f"
        }
      ],
      "purl": "pkg:npm/promise-all-reject-late@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise-all-reject-late/-/promise-all-reject-late-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise-all-reject-late/-/promise-all-reject-late-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise-call-limit",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dfe86069ad7d8f30862ee4826e279e46cbb90b68e829f627f2963a240b9715155f17820ef8bed43e91563537964fda4ceee86c92f6cf3ddfe810e92d0a7df5ed"
        }
      ],
      "purl": "pkg:npm/promise-call-limit@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise-call-limit/-/promise-call-limit-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-call-limit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise-call-limit/-/promise-call-limit-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdir-scoped-modules",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ac6a29037aa01083b2627d1b199f5349657a3d13e57097209f6e4661c322128a7aa4e73352eb6eba1d2e646a1e8fd1269028617a4a43676551d4cc7158c580f"
        }
      ],
      "purl": "pkg:npm/readdir-scoped-modules@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdir-scoped-modules/-/readdir-scoped-modules-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdir-scoped-modules@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdir-scoped-modules/-/readdir-scoped-modules-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debuglog",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b32059fab9c02b712032c1f669810e2d45bb999498f466fed3050c085b19bdc9a2cfe1e2800d0b39cabf1e842a56e186f842b292e9dced01b66f3ae9a277da4b"
        }
      ],
      "purl": "pkg:npm/debuglog@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debuglog/-/debuglog-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debuglog@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debuglog/-/debuglog-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dezalgo",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad748fd1b7fee67d10a27b1bf925557cd7c8b2298ee0712d9a72293c763c435502cca950ac331f7686ebf2724e3ac460582c8c46a792050ce659432aef3bd58a"
        }
      ],
      "purl": "pkg:npm/dezalgo@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dezalgo@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0521d680348088ab39d28d917bca69be9dec7951d7491338e1c752b13f457cd1145192ce196542b2259a44f58cd599e7fa6a99d4e7d5677cf70d61334a9ee144"
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "treeverse",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c21c3ad25eebfbc654f13bbf51cdb2c6d73865365b47f3c5deed483cd28643aa7c10808b6f7676940828ab0f5ba9877c224827b1a39c2f360715c923a8db1fd2"
        }
      ],
      "purl": "pkg:npm/treeverse@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/treeverse/-/treeverse-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/treeverse@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/treeverse/-/treeverse-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walk-up-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8708ffa8c0d4123094e61d31afdd0a1827f4b60d3f2e025b98e5a0ad629895c25933b5efaaebd4259d06fc7306afb17b39030e52e3c758ff49a6b8a29e402592"
        }
      ],
      "purl": "pkg:npm/walk-up-path@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walk-up-path/-/walk-up-path-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk-up-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walk-up-path/-/walk-up-path-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-we-there-yet",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2fea10d9b01e7b18a3dc4a21c5093792de0ca749e91d59d63f55fc9e70caaf2787f9983c4a482896c1657b598c6d381e22bbcd5fe9e95b3df79d8cacc79423"
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-2.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "are-we-there-yet"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 17
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arrify",
      "version": "2.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dddb84c2d8bcf34c6a8b878030df00c91e1ad01c93f74ce861d2e57af7ebbd4e37bdbd186706557f13a0c56acb5d75e9cae80bd2135973d1ba0620790779d4ba"
        }
      ],
      "purl": "pkg:npm/arrify@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arrify/-/arrify-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arrify/-/arrify-2.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "arrify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/resolver.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binaryextensions",
      "version": "4.18.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d0bb72b2bfd74ce059f007b5c68f5f87b9c5be4a1bc9cc9aa3bb0d4990a56cd6659dc0e2957118ce8bea55f57e76034b4dbeb3c2b0f91b14541bfb01351005f"
        }
      ],
      "purl": "pkg:npm/binaryextensions@4.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-4.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binaryextensions@4.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-4.18.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "binaryextensions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898"
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 3
          },
          {
            "location": "lib/environment.js",
            "line": 5
          },
          {
            "location": "lib/util/log.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-table",
      "version": "0.3.11",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22a2d08b894ed27201e2d71d4e93782c207d148deeaab2592bb442e75e449e167aa816a09642202026f5c23780aa976839a6e6d7e4ae42d91720f7580bdde385"
        }
      ],
      "purl": "pkg:npm/cli-table@0.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-table/-/cli-table-0.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-table@0.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-table/-/cli-table-0.3.11.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "cli-table"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a451abc5385671643632c033e91b607967b834ada4504d567ecaefbe572d74823be39116f48d327e5aa17bbfbe3392c473b6d5d9cffdff9cdcf2c15ca4bd03af"
        }
      ],
      "purl": "pkg:npm/colors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "7.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a51c419dadcc25ee872a7046b03c8cbfc1136e9b70ddac447581e8a8d87b82ee680dc7b0f1fb34c678af6469b4e8e824f3318027d557f8e3c4af61971102b876"
        }
      ],
      "purl": "pkg:npm/commander@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-7.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "commander"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/command.js",
            "line": 2
          },
          {
            "location": "lib/util/command.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "4.6.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8fd29d29146cc74b910c9e1771422eda24dfa23217ae7745211b87651350cb025bcbf091e32494d7fc24a6e095f057429ae671a4df30b999c6f96d4414c7130"
        }
      ],
      "purl": "pkg:npm/dateformat@4.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-4.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@4.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-4.6.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "dateformat"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fe9a4faa13c542fcf014ae5014df837e55f5debf48217b9cb09a9aab6b0a6199565cd5b11f9f9eaea3daa9c86a75a78c69cce1e4496e33b4177a2fb5f1e000b"
        }
      ],
      "purl": "pkg:npm/diff@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-5.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 2
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error",
      "version": "10.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "631205109ba181c202ba0394bd1c79b61d1433e01cb59f6c8d8d10266795c2c41dbe8b19ee463373d42a4b40dadd1e62526814e66786231874c41799a4c55e2f"
        }
      ],
      "purl": "pkg:npm/error@10.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error/-/error-10.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error@10.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error/-/error-10.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "error"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/conflicter.js",
            "line": 4
          },
          {
            "location": "lib/util/transform.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4eda5c349dd7033c771aaf2c591cc96956a346cd2e57103660091d6f58e6d9890fcf81ba7a05050320379f9bed10865e7cf93959ae145db2ae4b97ca90959d80"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "escape-string-regexp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "5.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2e4a9659a1c01944100f20420d263dcba3d1f21a2b6595ccdcdbb121e586288e3305327f321cc0cc6941c4d89a9fab4e43ff0b9cc08e091944725edd6f721ca"
        }
      ],
      "purl": "pkg:npm/execa@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "execa"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/spawn-command.js",
            "line": 1
          },
          {
            "location": "lib/util/util.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8910cf24a50f544343edd1cf3bcae46ce9cfa720f281c0c5b568e9796342832f163f6ad77315cbf13b2445e425e8eac1d86efe509ada82cd6ad7916e75cec6eb"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6ce968beda3de3423aa2ef4c3902537c0c59e44b00be32a9b113374400b076a976585775ff6f50937e03cb18934c7805b174f7d4f053b59acdcd51f68708f62"
        }
      ],
      "purl": "pkg:npm/get-stream@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "human-signals",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07814567aabf4f68e1864b2091b116dc706f5887c35bce6c9e44206b0b74ed2ec9e505d393a064355fb4c80799acce50a4c01d625a1c1a89639f4b09fd642417"
        }
      ],
      "purl": "pkg:npm/human-signals@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/human-signals@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/human-signals/-/human-signals-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "845a222624e5eb79e7fa4b2d1c606d7b05922a740ba726f5e7928785e035977f6ebed3bd9d6228a75a77b9da8f71477fc5b17554b30ee27ece23aa7b45b9e00e"
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b8f16cd95bbefbce1348ae7ee0c4e94848d02a8bd642fee4059d175b7881e1661080e94aa990e4fc4f51bb06f7dd80fe04afc805e2c51b692d22ed0bc87c25b"
        }
      ],
      "purl": "pkg:npm/npm-run-path@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91ba5a4921894d674063928f55e30e2974ab3edafc0bc0bbc287496dcb1de758d19e60fe199bbc63456853a0e6e59e2f5abd0883fd4d2ae59129fee3e5a6984a"
        }
      ],
      "purl": "pkg:npm/onetime@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"
        }
      ],
      "purl": "pkg:npm/mimic-fn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-final-newline",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06ba6f7cd004ddd72fabb965df156e9b38ca8d9439b48d6c11420aaf752892cd17525e394addc595ab55a9e7fda6b9388d10f3856e96660fb76e4f77cbaa4b8c"
        }
      ],
      "purl": "pkg:npm/strip-final-newline@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-final-newline@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efcfcf5d3d7094b2c3813cc3b3bb23abd873cf4bd70fece7fbbc32a447b87d74310a6766a9f1ac10f4319a2092408dda8c557dd5b552b2f36dac94625ba9c69e"
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "find-up"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f64ae9e6236f146edee078fd667712c10830914ca80a28a65dd1fb3baad148dc026fcc3ba282c1e0e03df3f77a54f3b6828fdcab67547c539f63470520d553"
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2da363b51594058fbecc1e6713f37071aa0cca548f93e4be647341d53cdd6cc24c9f2e9dca7a401aded7fed97f418ab74c8784ea7c47a696e8d8b1b29ab1b93f"
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d839a9ccdf01b0346b193767154d83c0af0e39e319d78f9aa6585d5b12801ce3e714fe897b19587ba1d7af8e9d4534776e1dcdca64c70576ec54e5773ab8945"
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad592cbec9cd09d27fa2119ceb180fc3237c7a1782c6c88b33c9b1b84fedfe6395a897b03ee3b59a22e94c74224604ca08b7b12f831e00555a82db3b1e6359d9"
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "11.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e121768ecf2d6c6fc232a1c6abb964a7d538e69c156cf00ca1732f37ae6c4d27cab6b96282023dc29c963e2a91925c2b9e00f7348b4e6456f54ab4fd6df52de"
        }
      ],
      "purl": "pkg:npm/globby@11.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@11.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "globby"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/resolver.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c6cb1a0e4d853208ceacb547ba1098277781287b0008ef331d7ea3be9068e79599810f3fdc479a5ff2bfdc4785aaeb4b0bfe9d0891c8d41043f04b7185ac8cb"
        }
      ],
      "purl": "pkg:npm/array-union@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dir-glob",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a4ad6a7d191e0a5df28663338b993b86562d545857f0b37efb9fd71ce79fed6fa0eeab217aa5c43901b88712c85a0e963dbfaa1a4abd9708389d1a633077320"
        }
      ],
      "purl": "pkg:npm/dir-glob@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dir-glob@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80329bf1a64c0de0ffb595acf4febeab427d33091d97ac4c57c4e39c63f7a89549d3a6dd32091b0652d4f0875f3ac22c173d815b5acd553dd7b8d125f333c0bf"
        }
      ],
      "purl": "pkg:npm/path-type@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-glob",
      "version": "3.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6b3b7fb56f14a8dd9547027ab3cae7b0613e9a3051d101de0a72cf76300a278f04192ec2bd774485d48c90de4e4fa22af14d6d0e7bf46a160310e9370d13913"
        }
      ],
      "purl": "pkg:npm/fast-glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46484f3e9db3aea0c0400ff68cd867ced70f025bfae17761229edaef8e78039a2f23b06e93182decc5fbb9dc00bb7ce0d437293d4d2bcf7555d5279aaaf638f8"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.walk",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0607e53196059c810920c28f067041b07a6a1316ddc520ef5a6da6c199a1b05c8a01299f864f2d293f5f396de1a0ecb96287f3521d25765c0b35967ce7a1c4a"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.scandir",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-parallel",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e65e15c9947ce8b67f943c594d1ea3a8bf00144d92d0814b30fdba01b8ec2d5003c4776107f734194b07fb2dfd51f0a2dddcf3f0e950b8f9a768938ca031d004"
        }
      ],
      "purl": "pkg:npm/run-parallel@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "queue-microtask",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e68d49ae9f94a4f925a498433268934e09cd32f5080e9a1a1bf9adf2d6dcf82a03e3360a1a59427002f21f22e19164052f17e51aa40c11c0eebe217a3dcaf4"
        }
      ],
      "purl": "pkg:npm/queue-microtask@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/queue-microtask@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastq",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6299295272bca1dd28d6199e49ced452cfde07fbc83d62588ca724d90288cc07fbd559b500043711bb99077836248cbea60f84443d2fa88efd2b26620767b637"
        }
      ],
      "purl": "pkg:npm/fastq@1.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastq/-/fastq-1.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastq@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastq/-/fastq-1.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reusify",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53d9c7f3c6b77dcfde902175974fd43f5228b22b888f24e1ee106f5d530762055c7c6bedf3ded782e8f650e2c3788e411b69bbfeec3268b553e9f6ed0b04f2cf"
        }
      ],
      "purl": "pkg:npm/reusify@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reusify@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3"
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a"
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge2",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a"
        }
      ],
      "purl": "pkg:npm/merge2@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge2@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "4.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cccbe1117045b6abc6763e8f96357bb0ddce586944858c03b91ac26a7c497b523bed22e14a3ba66b2af708b5dcbdf1dc05236375b60df334874a6904fe68d74"
        }
      ],
      "purl": "pkg:npm/micromatch@4.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fcba6f8bd51cccdd60d2cef866ea0233d727d36c1b7a61395c10a02fb26a82659170e3acfadba9558fd8f5c843d6df71f91fe94142964c3f593c97eefc1dad0"
        }
      ],
      "purl": "pkg:npm/braces@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ea3d17e74c5260b62dc6f805b56f9ca2714cf8c29be451a5ee200ee1abce42fb984565fdd8d84aed8e750d8f6b7d36378a2a91283d8abea368b589d94495a5"
        }
      ],
      "purl": "pkg:npm/fill-range@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "254ded7874cd8e6136542185cee63c117cc20d5c04a81d9af1fb08bf0692b4784058911e55dd68d500fcd0253af997445d748b6d2b2e2f0263902056a9141454"
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a6c606068843c22e17cb9e93e9d4ca119a27f01083a08dc1d7c4e063bfb998f7a73e79649cb0e3fd735d766722dd5878b41711e323ee2e561298a7f81c75199"
        }
      ],
      "purl": "pkg:npm/ignore@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "3.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83d43585a79bcb7e8e492b706f89ed08618668ab1a5528d0ebc7c1c6841cbad9797d2d6fb98d7c1f7c12b778c5c85b6b931f8acf45751bce40e0cc80743322d9"
        }
      ],
      "purl": "pkg:npm/slash@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "slash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 16
          },
          {
            "location": "lib/resolver.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grouped-queue",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcf88551aed622c978f1d51e0af8481e7c0d980033948fde1e8265d2fbb79ec140dfae8995e63b15ff04553a6566ee643b43087598ca4d39f322d2fad5a85b9f"
        }
      ],
      "purl": "pkg:npm/grouped-queue@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grouped-queue/-/grouped-queue-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grouped-queue@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grouped-queue/-/grouped-queue-2.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "grouped-queue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 7
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 5
          },
          {
            "location": "lib/util/util.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "8.2.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e7e05d3577153c55e29fab5f762232ecc6ed3f3a6319e0b837c4a027b35e3cac26973fa9ed0281245586538568f038df00973759662ea8aa784d6f1506f6156"
        }
      ],
      "purl": "pkg:npm/inquirer@8.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-8.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@8.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-8.2.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "inquirer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80a5e3e402eb29640bb181bd8e54d1991ff12a5bb11d5f99f501303488027ccd7fbb03cc0aecd55678799b04ddf8eb8165cc1220c6eab2c356466d65139d5069"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@4.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.21.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b74af306af3b9b77d571db870d41612a6cb25fef5ea3a5908d9bdfe7511afccd10efe4f7ef8269d5a522c9497418ac69f0cfce113547483be69323e0bd7f97db"
        }
      ],
      "purl": "pkg:npm/type-fest@0.21.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.21.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23fcc7030b0a7fd16a1a85cce16591002a1bf7e48dba465377de03585e7b138b68a2e46e95b0b171487a44a5043909584c7267ce43ccc92bcf35a6922cd7cb67"
        }
      ],
      "purl": "pkg:npm/cli-cursor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97eb1279fcc7a63e6a8a6845484e5af27b9f65800cdec05254c00fb589260bee041f66a7486684317483d22cd141bbbd9dfc90f72e49ad59a9ec4f2866b523bc"
        }
      ],
      "purl": "pkg:npm/restore-cursor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "171aa990f3f0bb51e3b8df773a67e6e21f2e21a9d7a1f5b44715445b793944ac7e9892584ad873361a77d8acf1c72dd800467f0dcfc458dd6f651634fa43a16f"
        }
      ],
      "purl": "pkg:npm/cli-width@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "external-editor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84c438097d69d62ce6b8b63266a2cc3bfa86370d74c12bfd40308f7f35dfc85ace682492a117ea13529fd6ce5a9fae89e49642eb635ec06fa62b8f63382b507b"
        }
      ],
      "purl": "pkg:npm/external-editor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/external-editor/-/external-editor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/external-editor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/external-editor/-/external-editor-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chardet",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "993f220dcae1d37a83191466a00da1981267c69965311fb4ff4aa5ce3a99112e8d762583719902340938acf159f50f39af6eee9e488d360f193a2c195c11f070"
        }
      ],
      "purl": "pkg:npm/chardet@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chardet/-/chardet-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chardet@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chardet/-/chardet-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274"
        },
        {
          "alg": "SHA-512",
          "content": "0f6151d37562afb148bb8e57058db49936fefd9496074d2c8d4f637505edf37803ac8e19b73e45b3bff2cbbe20d8de52550638c58d6a0ebe2b35d770611557d2"
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9a76e40544a2d760e1a0127e8065abbdd23de08123b28aa5d4d05f4965f79762135af899385feb38e40db38398e7b3cec60056b7e01066da45f0e17a4d71b76"
        }
      ],
      "purl": "pkg:npm/figures@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        },
        {
          "alg": "SHA-512",
          "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "escape-string-regexp"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 6
          },
          {
            "location": "lib/resolver.js",
            "line": 4
          },
          {
            "location": "lib/util/log.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e76d658e9285b252c4e32ab8600f475ccf6da67644a7a58a9b123226da787086ec654a4a72c09981a3c87466a25d929ef799bf744acb0790de2bb1168101f00"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ora",
      "version": "5.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5be98f39b4fc5967b432b4ef81433cac5b7d47264bb6edc4489646c05da371f8175c562f8b951166557cde17a6bb242c09a72c397386fe61254899022b069b9"
        }
      ],
      "purl": "pkg:npm/ora@5.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ora/-/ora-5.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ora@5.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ora/-/ora-5.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d56d3b70cf604ba0dc2e97ab65f1528fe6d62ed68f1923875a13e21b35e6bd525b44b746f36b07fca9fc12d5b556a595039e0029fda1e64e416e721bc05de1eb"
        }
      ],
      "purl": "pkg:npm/bl@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10773220f050e0148696f8c1d7a9392a0009dbb088b0763fd8906609145ea38f32f6b43731a533597dca56505ae14eccc97d361dd563d0aec2dd6681de3bbb15"
        }
      ],
      "purl": "pkg:npm/buffer@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-spinners",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7fe5f5a618c9db29001a37037e519955efda812ccf4916726e274de0222e7086ba1bd31574a1f3551f2f4387019db0c25073638abf4a0698bcef6aabc056ffa"
        }
      ],
      "purl": "pkg:npm/cli-spinners@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-spinners/-/cli-spinners-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-spinners@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-spinners/-/cli-spinners-2.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-interactive",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d87bc810a468a92eb682e102faa063a6f46e6dd5fdd7458232e25367e23dcafa8a536ff5d9e48be78f47330b5a6dbe28ba9763dac30fe7493e5c97c1ffc244eb"
        }
      ],
      "purl": "pkg:npm/is-interactive@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-interactive/-/is-interactive-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-interactive@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-interactive/-/is-interactive-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unicode-supported",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927c46daae140b7bbcb2d446c8054908e771166bf90d989171d94868041701b49f2726be3a1a29368b4b42bb2d061aaeaaee19a6e29b0dcffc4ba9a05e03c53f"
        }
      ],
      "purl": "pkg:npm/is-unicode-supported@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unicode-supported@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "4.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f173efa4003cbb285fb5ebbca48bd0c69259ed2618769522bd9a46cbab05b01b8a458ffbad019abde75e07c68af99932ababa930554bffd016eaf398cdf4722e"
        }
      ],
      "purl": "pkg:npm/log-symbols@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "log-symbols"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/log.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wcwidth",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0b0dcf915bc5ff1528afadb2c0e17b532da2fe8"
        }
      ],
      "purl": "pkg:npm/wcwidth@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wcwidth/-/wcwidth-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wcwidth@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wcwidth/-/wcwidth-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3cda2b473a762b37421bf2bfb3ee5690cf7b1d13ee053f777d43b54b3bb53e2914fe091d06b16bb21f1cdd018f3623b717bf41bfb70aeaa264c92ceb2c3b91c"
        }
      ],
      "purl": "pkg:npm/defaults@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2501d9d90316ea5dda1ff8fac42a904e163ff4e1f80fff65b37e1c8245018847a87114d4d38b477ca3c1b142b53ea64251033b1a20342085c94ae5c723ae0a6e"
        }
      ],
      "purl": "pkg:npm/clone@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-async",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6f56756fd356fc73546b03a129ec9912b63f391aebff62b31cc2a6109f08ec012d9c4e698f181063023a425bb46b4a874d4a8136fea83d3b86dc78dbd4b8381"
        }
      ],
      "purl": "pkg:npm/run-async@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-async/-/run-async-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-async@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-async/-/run-async-2.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs",
      "version": "7.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b32f87d294287cef795439852f3c9ac3dc4d254e0a4d14b040818cebe886dd2ca902d0a22c3ce9786f2c26b3425a7d94a7d926f8a864bd375b92b772fb2cd977"
        }
      ],
      "purl": "pkg:npm/rxjs@7.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rxjs/-/rxjs-7.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rxjs@7.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rxjs/-/rxjs-7.5.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77ac4ea440dfb22d8265594f43319ebb1f173302d3f61b2c02c68f604c5a40cb98b24c1bfb1d71ec9dfbd6d5a56c17561eba32f7d2a7541eaa22451bb395f751"
        }
      ],
      "purl": "pkg:npm/tslib@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        },
        {
          "alg": "SHA-512",
          "content": "c3cf6a83b3c8f3001dbd7eb46cc0cff9b1680f90ef866f682e1785a793b86b6405d1c4811ac057e2a66669d3ccbd5aa52c9041722f96a8618e00fbdc0de35256"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-scoped",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0afe0ea4f4c700af641d8ce4cc2ae87f754987b1ff3eb1b630150cbef25e6da69431baa19b4600b579ef8742371e78f6b4c656c2b4513962d281f26b2aa5a695"
        }
      ],
      "purl": "pkg:npm/is-scoped@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-scoped/-/is-scoped-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-scoped@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-scoped/-/is-scoped-2.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "is-scoped"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "scoped-regex",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8375b11eba92582647187952ac5e7555715d8c89a1c2f1fc64efe9af2147e7a422d1c0ec65fca541afedd230b355014d6cdbccd341df1e39033c4b9aaca0d259"
        }
      ],
      "purl": "pkg:npm/scoped-regex@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/scoped-regex/-/scoped-regex-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scoped-regex@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/scoped-regex/-/scoped-regex-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isbinaryfile",
      "version": "4.0.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "887aea7b9b21bc151c15b999abdcce40706878e85926ee91406ac3a4181e9d49bf026f85dc9336320423fab2b767ad357f3acbe602d95ad00f1f638169255ccb"
        }
      ],
      "purl": "pkg:npm/isbinaryfile@4.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-4.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isbinaryfile@4.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-4.0.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "isbinaryfile"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem-fs",
      "version": "2.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca2022bdde3114e1ff5979548babff9caa29061d502f3c23162dfa34af3c706b7f3d15c8f16781012a98f984a32155af413c77851f331ca0c1315ea15a682534"
        }
      ],
      "purl": "pkg:npm/mem-fs@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem-fs/-/mem-fs-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem-fs@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem-fs/-/mem-fs-2.2.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mem-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "15.14.9",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa377cf03ac2c6ea71fe4243e7242065d7182992922060550c8044d7f2d319c366dddd8da7f8f1a2391d78f0dd7e704725ce56eef48ca5b275681ee9fcfcbaf4"
        }
      ],
      "purl": "pkg:npm/%40types/node@15.14.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-15.14.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@15.14.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-15.14.9.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "vinyl",
      "version": "2.0.6",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b227488e0833479caa4a4e0046e90e893a71d38fdcc5b5afb78f66fc123cdad1ee1cbd1c8c9f46682c499b3eb4c77b96184650d83ef3d655d578713691c87ee"
        }
      ],
      "purl": "pkg:npm/%40types/vinyl@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/vinyl/-/vinyl-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/vinyl@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/vinyl/-/vinyl-2.0.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/vinyl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "expect",
      "version": "1.20.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "439567df28d30f208c579d1307a55121b40dc521383a6651f3a5526c668da5f528966d2278f041e0a7441079b1a18e6c4f6fb60c8bd75b4aef3033f69c767832"
        }
      ],
      "purl": "pkg:npm/%40types/expect@1.20.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/expect/-/expect-1.20.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/expect@1.20.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/expect/-/expect-1.20.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/expect"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c82376d74450592e57b3a06e457d955c5df9598163ffe1d0b02adc5de64cbdf8b3ad338092ddb21142c991d4a327316d3b8e913c7ea47695cc4f67ef2c24873"
        }
      ],
      "purl": "pkg:npm/vinyl@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dcf7bf085d4d9fde21ca1218a63b622e1742a04a33d03a90fbdf3c13d826784750665a23c6739bef8c1cb45caec16407ceac9ff57ec2ecc1bc8ee529a81253f3"
        }
      ],
      "purl": "pkg:npm/clone@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-buffer",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28b2d3256aefc083fe38f7cc9f4c763e178310fdb444f51c1978ff1117a04e07663c46729402d095dca08aaacf3eef0fe39b8db8fb3b72499178b63abff880e6"
        }
      ],
      "purl": "pkg:npm/clone-buffer@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-buffer@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6aeeb2752a60ea7b2b8a0719e26f0173d8718de5be189f318791b704908cb785977b51f5d1435a54e6a6a904e6af1d648d5bb100721048d53a858e0db27f7f6a"
        }
      ],
      "purl": "pkg:npm/clone-stats@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cloneable-readable",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8417ccd340ec58abbd18e172ada2b42ea6a1749b8f4c073dbfc9fe418fe3078efa46dc7cbbb089a27e7a83e9403e4ca63179257ebbaaaa40f6b037952f9e929"
        }
      ],
      "purl": "pkg:npm/cloneable-readable@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cloneable-readable@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b868f0ae2321b1c0c67bb18bba38d8ead9805fd94cd72c663ea744ac949a484b16af021c8b69fdfcba85066e6663ff9f7c99f550546e9e33cff997f219983f"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "readable-stream"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 19
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        },
        {
          "alg": "SHA-512",
          "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef"
        },
        {
          "alg": "SHA-512",
          "content": "fe14be634bb768e7c811389a8a2ad41700c10f39973ef3be8c07ca4e2b549e020fcdd29ce99d0ba058ccfc22b93cbe02f9e2b01e88651c06fa1f45457e6994b3"
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c83e411c27bbaae0a0069878acc43ed0a90844ac160ab1c3397d69d46a7a1f08cf339915a0274a18d84def276aaac5fa949127403299fed14c884750d5dbcf13"
        }
      ],
      "purl": "pkg:npm/replace-ext@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-file",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b104d9e4409ffa325faadd520642d0a3b488b365"
        },
        {
          "alg": "SHA-512",
          "content": "0682438fe71adc3f713ae3c433a45656d590b6f10f4224189fcd8bbddc612d6a657d0b01cc1aad80ad328423f4b3504d4e2e9d1fd04ef9dcf26efc9021a7227e"
        }
      ],
      "purl": "pkg:npm/vinyl-file@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-file/-/vinyl-file-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-file@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-file/-/vinyl-file-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        },
        {
          "alg": "SHA-512",
          "content": "b9d82c018f9f4e7befee423b69ac5bab058d6f4007881d2a04ef3d3d928f9284e618e81d6eb1c3283fb40765f8b937c9fc54f5474f6bf604ec8d48cd268b6ea2"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom-buf",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1cb45aaf57530f4caf86c7f75179d2c9a51dd572"
        },
        {
          "alg": "SHA-512",
          "content": "d6c5082f58dc9344f59a138b3f673af7a048ce7cd3e76e4b92e6fe9f88e33078e18e1a00400e987bae7d0f1765641af468b0cc4284f1288a6796ac60b708ecb9"
        }
      ],
      "purl": "pkg:npm/strip-bom-buf@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom-buf/-/strip-bom-buf-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom-buf@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom-buf/-/strip-bom-buf-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        },
        {
          "alg": "SHA-512",
          "content": "acc60f62f0b3b17cb022c95d80b692a0f970e4f7e807fb2cafb858e292df72876b03933f780af36b56bd5664e234804d323386af53b0f664f2536a3af54e94f5"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f87db5ef2613f6968aa545abfe1ec728b6a829ca"
        },
        {
          "alg": "SHA-512",
          "content": "c87d3e983f286a10595a7638defc6ce294a29e7f1230a01d9a5fc438605ec287b5634122b5dd21d8c837651897aee516e8be0ffa5bd988481b87436050689ad7"
        }
      ],
      "purl": "pkg:npm/strip-bom-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom-stream/-/strip-bom-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom-stream/-/strip-bom-stream-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bdecdb8e083c0664b91945581577a43a9f31d70"
        },
        {
          "alg": "SHA-512",
          "content": "5fc67e6ffd0be254e8298abe9709caaa2f57fd97a4d0d89b2e9b09815b12c69a18abb26d882b516f91ea295123130fea01bff800a2912cec302879563699b612"
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        },
        {
          "alg": "SHA-512",
          "content": "930ad7d72edcce9d44ebd9f66a36c6eb9988a3d76abc9fbc681417386571ab0bcd6ec5dd14ce8bab7edd2c06379a49d4c2bbbc09f7026df38b2ff80ca3e7e2de"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem-fs-editor",
      "version": "9.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d248e2d2551aec0ddba2f48ea2f7a743b46fa801ecffe040768387234ab36180d43733e2f9efffb6d8db8f74e452a31bce1e3220ff178e13e0b4c3017dd43da"
        }
      ],
      "purl": "pkg:npm/mem-fs-editor@9.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem-fs-editor/-/mem-fs-editor-9.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem-fs-editor@9.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem-fs-editor/-/mem-fs-editor-9.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mem-fs-editor,mem-fs-editor/lib/state.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 11
          },
          {
            "location": "lib/util/transform.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bda40870d236b511d6f91957481759a3670fc0488d0095285733cdd45067b60d5af94dd00f100d4e03c9bf83ccd6a7dc7a3a7ee0aae7d8f856ad0db0b730342"
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ejs",
      "version": "3.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fec5d978c9614b402b91f5f6030efcd202735d230f9ca8edb29619bfe7f736228b96e6decc01c3539fbdc73ea0777fcd846dedc500a8eb19609664d2fa84c611"
        }
      ],
      "purl": "pkg:npm/ejs@3.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ejs/-/ejs-3.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ejs@3.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ejs/-/ejs-3.1.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/ejs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ejs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jake",
      "version": "10.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b15a7161eb80856b743935884f04fdf28c95d06b17c8c957085fb72f54ae69f055508affb882c6441f8dab09338605cabe82690c8a50bea91400b81d990b10c7"
        }
      ],
      "purl": "pkg:npm/jake@10.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jake/-/jake-10.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jake@10.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jake/-/jake-10.8.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jake"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jake"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b29651cb328be65e41650aebffa9bf4aa15d04dd2adce088d1ff6b8df07308c0483f8a7be4feb6d2b47781399a92c34e866ce077171ac5d35f332e9a9eb6ccd2"
        }
      ],
      "purl": "pkg:npm/async@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-3.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filelist",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c35704b9fdd2f83acb0902fb113ea4cfe82694975babd27bc970928cafce6423c0faa10dd56c85e1901fd186096b8fec84726b6b6b7f77fafc495e098bec7ef1"
        }
      ],
      "purl": "pkg:npm/filelist@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filelist@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multimatch",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca930aba0954ad9503f7d4e4d9b510fb13508f8de53c47c0797da8f5c4ed780992857cb65470c9a6ec2ed68d31aa8282b7d8cb540bf0c8529d2d33d72807c9c8"
        }
      ],
      "purl": "pkg:npm/multimatch@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multimatch/-/multimatch-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multimatch@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multimatch/-/multimatch-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "3.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a5cfde3d874d86cf6b9908c1b00d44834b56019537430e06d61e2fbcd65dbdb5000b52dbf3e2b0188b9ba85611392da828aba0dea805256eb1ef5bf9970e075"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c7b5f612e8ab4c13fc880212a3676ba5ed723dea54061d1a6eb494073bcd0b016427b863f888220df2f74c45ba066c8118070537deaf13721d68b36f97d2432"
        }
      ],
      "purl": "pkg:npm/array-differ@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9e66ce4bb375ad0a2b075a9f52d86532f1daa4a468b80554b3dc66aa884e9ecee6f4e75d844b3b57530501e82e8829b4246363e76ff983e166288c24707302c"
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "textextensions",
      "version": "5.15.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31ea994472ee6866a65171ae567da2bed5372c0de62c20883b99141a8a214c2a06982060ffef323e15955fd59297db5e96f55df1eadfb63164f45c1bd9d0faaf"
        }
      ],
      "purl": "pkg:npm/textextensions@5.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/textextensions/-/textextensions-5.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/textextensions@5.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/textextensions/-/textextensions-5.15.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "textextensions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "5.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02a66d0d458e30ab351bff25c329558eb75882a03877d9eef2173ed20cd1c650dbd48d74f851c118c5ece9a8901c574251496a1fdf4c50cb8b7f3583343b5fc7"
        }
      ],
      "purl": "pkg:npm/npmlog@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npmlog/-/npmlog-5.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "npmlog"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 14
          },
          {
            "location": "lib/util/log.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gauge",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb927a312ff95e4b02b97abefae151b2751decebeed577a76deb88b8d449c585a38106cfb85853d78940bec59fa9f0269f096e7f53b0323cf7f478df2cf722d1"
        }
      ],
      "purl": "pkg:npm/gauge@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gauge@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gauge/-/gauge-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        },
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-queue",
      "version": "6.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4701696fbd9cfc18502c45c86792b67be02180d56621e8c695382207d3336747bddc646fa99eee4a2d1dbd117bfd72170de364adad9f3470714f23c31b24a98d"
        }
      ],
      "purl": "pkg:npm/p-queue@6.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-queue/-/p-queue-6.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-queue@6.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-queue/-/p-queue-6.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "p-queue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/out-of-order-transform.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "4.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f20b870590b02a716161d1ebdb2b2e45612b4f08683765fc5c42d196b470a667de6368e3b94378b5a40cb142ca515a352b80ef665fb4a607f2a32b07c6f9af13"
        }
      ],
      "purl": "pkg:npm/eventemitter3@4.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-timeout",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae1230532720c3029c3fdc9338e14afc02ac028a638c26a456a2c778f3b7082e8c8abd59f7dc53f91eb78d9c404f994564b6b68a74b987e652d86bd1f7dfc506"
        }
      ],
      "purl": "pkg:npm/p-timeout@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-timeout/-/p-timeout-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-timeout@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-timeout/-/p-timeout-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae"
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-transform",
      "version": "1.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50929d4b381ddca3a75d702da8de7efde78772f4e7d610647ac126125560bcefcd01873102f9a3cc81a69cd7774dbfe0440bcc05d351143e2a016747c58e905e"
        }
      ],
      "purl": "pkg:npm/p-transform@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-transform/-/p-transform-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-transform@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-transform/-/p-transform-1.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "p-transform"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 18
          },
          {
            "location": "lib/util/transform.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "preferred-pm",
      "version": "3.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb06606f13444bf2a526cf6ae3417fd6c7ce77f8fb7f53bd25a1dc5b90ec9f769450e660dcbd9b8e955470a5768efb449587e84ee42235e31f409e24c1402109"
        }
      ],
      "purl": "pkg:npm/preferred-pm@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/preferred-pm/-/preferred-pm-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/preferred-pm@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/preferred-pm/-/preferred-pm-3.0.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "preferred-pm"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/package-manager.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-yarn-workspace-root2",
      "version": "1.2.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86bea16f5c3c78f3293d550adfd4b8465c09ce2fb13cbb95b86f179705d4dca0f9627dea8015957f2dc0ccd943856bc4d44391084eb9fd09b6eab150b7754b54"
        }
      ],
      "purl": "pkg:npm/find-yarn-workspace-root2@1.2.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-yarn-workspace-root2/-/find-yarn-workspace-root2-1.2.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-yarn-workspace-root2@1.2.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-yarn-workspace-root2/-/find-yarn-workspace-root2-1.2.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d10f36da2a30be00e5955f1014ff1e7808e19e22ff5e6fee82903490a0d4ede17c96a0826fb8fb178b3c6efc5af6dc489e91bb59c2687521c206fe5fdad7419"
        }
      ],
      "purl": "pkg:npm/pkg-dir@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "4.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
        }
      ],
      "purl": "pkg:npm/find-up@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "find-up"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
        }
      ],
      "purl": "pkg:npm/locate-path@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
        }
      ],
      "purl": "pkg:npm/p-locate@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-pm",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e1b3d3e6ca9874a799f96779959cdd3259c6d0614003eeb6d052232c431389dd3e7b93b4457b7e5253058c7fb76c6c3664b35b8e9b0e0079c07f24c0e3defff"
        }
      ],
      "purl": "pkg:npm/which-pm@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-pm/-/which-pm-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-pm@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-pm/-/which-pm-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-yaml-file",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39f081906130e2737a24bb6046274f5fa4318c140641fef6ab7b22daebeac8510c6f27121451f0019797c7a70980533dc262eb7fdcc1c023f722fa9af8b2d93f"
        }
      ],
      "purl": "pkg:npm/load-yaml-file@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-yaml-file/-/load-yaml-file-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-yaml-file@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-yaml-file/-/load-yaml-file-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esparse, /app/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da"
        }
      ],
      "purl": "pkg:npm/pify@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "5.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "145c34dfd4e6ac1a852bc99affb38bdec0f3fd5cad76d26bd38e3f41426d1f4c0af656fd8cbabdb49c88c54c2d4091f06abd81aad880e220964b0a3d24b93316"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@5.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-5.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-5.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "pretty-bytes"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "4.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32e12703495b4a2ec94bc5ccf963499566641c001d9bb8044c77452bffd0fe60a11b28f66a4105b5d2d9877da349d91619b470096f699fa8372d60dd0de66705"
        }
      ],
      "purl": "pkg:npm/readable-stream@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "readable-stream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 19
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abort-controller",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87c950f2d69c6589d1def3504e089b8feb4e0c7239ffe974e80bb63dcae2bff1a67add1e6a3e13c161f8d6c3bdc271c3890b048f5f6ad1daf375675e007b707a"
        }
      ],
      "purl": "pkg:npm/abort-controller@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abort-controller@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-target-shim",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bfd976e74b3feec51094ebe35d54980a5834cce36efe32a61b910cc3df6d43b8240952a3ae24a200d08336f96db1b581dd28e999e1d47a7c4c6c7784972fe59"
        }
      ],
      "purl": "pkg:npm/event-target-shim@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-target-shim@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "153882a4dc6dc226591c465b71b4c87198c44552029fdcaafe90c591397de7f031cc3d6768172d37b60eebcae233f80b48363bb1dacc6f2f21a1f00362ebaa38"
        }
      ],
      "purl": "pkg:npm/buffer@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-6.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "3.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "990c3ed9f9106c02f343b574318d08a9d9d734e793b4fe2bd2537dcfb0006b009782a79aedb0e28b6d0062b201ac577f1f1d0cd8e733e92d75d4268591471bd1"
        }
      ],
      "purl": "pkg:npm/events@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-3.3.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "events"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 3
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 2
          },
          {
            "location": "lib/util/log.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71d19e7ff76b585a32743d49b0ccee15ff35d349d997e193fb269c7366c471e7797fd463938cfe5ad1544c1bbd3e13a2f63fe37e604fbb498c118e3021d005f0"
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
        },
        {
          "alg": "SHA-512",
          "content": "37ef148ac0170c693c3c55cfe07033551f676df995277cd82c05a24c8a2a0b9bf98ac8a786bfabe6e68ef3eeebdc131fb8d22e7c8b00ed176956069c0b6712a7"
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "text-table"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/log.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "untildify",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28af314359a4cd97a0f629dec261550cd920de5e4b521a2af6437a896601fc20bd60c1bc1c0f9cd50f07c037ba7445fb904aeb11535504eddf5ac56ae620e0b7"
        }
      ],
      "purl": "pkg:npm/untildify@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/untildify/-/untildify-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/untildify@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/untildify/-/untildify-4.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "untildify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coveralls",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9dc671b63479dc483d4daea6d2337767fe5139ecee907ff9287bdf88edcfb0ce4a91984bdca7492025dc4a227cd8ce42022a414c66c5f755cb77fbeb6c17dc3"
        }
      ],
      "purl": "pkg:npm/coveralls@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coveralls/-/coveralls-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coveralls@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coveralls/-/coveralls-3.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/coveralls"
        },
        {
          "name": "cdx:npm:bin",
          "value": "coveralls"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcov-parse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eb0d46b54111ebc561acb4c408ef9363bdc8f7e0"
        }
      ],
      "purl": "pkg:npm/lcov-parse@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcov-parse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/lcov-parse"
        },
        {
          "name": "cdx:npm:bin",
          "value": "lcov-parse"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-driver",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53b28298b76ab061c12de5aa625140d15d1297a3f4f0413566b980f5cc63504d1656a4fdaa7c950cfcf5933a4510fd23749b859dab1621f49dedfb1a3579296e"
        }
      ],
      "purl": "pkg:npm/log-driver@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-driver@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26c8e79386f0dd826a6336ddc8188db0f5873df3bef94186ef8f42c6cea9782bb95e0e27ade9dae8e571398c6b413ab0c34266c2df9179ff2b820ba69132f3f5"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.88.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32cbed3ab7c6f5972b3b0016f908be17a1db0f40965c487da2eefbb8e6fb14cd963e1c13eec98cf37dcfcda9e124bb205e337cf48afa5763dccd7367329c0a87"
        }
      ],
      "purl": "pkg:npm/request@2.88.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.88.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.88.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.88.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3c91c1aa9d87ff6268e84617f1caef822f106352d1cb5cb5d7fef51fc7d9762d8cc6ddcd66eb59eba72154648eb3792f8b8bfc1630c89d0fd2a0aeab46ab798"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c61d51977e21e858b50c2d9658a7f151356a46c367afa2ec2b3dbe85fc03c502569abc7cf9cef295aa8131c1df975535af676c89f3af297dcb42e2cd67e5d2bc"
        }
      ],
      "purl": "pkg:npm/aws4@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2d605ca27da15f19a72888e6e325e828964c12538c503466d581488d6155316d0db1da552c16f638855815cc68887ba58b38fab27165c0e3497e3d6b31b6153"
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        },
        {
          "alg": "SHA-512",
          "content": "8f428b60f866eb379a738973de8277a3ae6abe040270fb9b8b2a2d66b5ea11a1b884d6a03583bca9d954ad7e6fc2abfda21a9e4ff6778fafb25b4ebbc9659d53"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e64f64f49658dbc5d4197eca6c9e8f6182b1b7522afa2ace5a7e2b26eb6a68c6a04ceac0e7304b8f9b34eaf17374384c2a28b2dd8758d0237ab213ae8dcdbdf"
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "this library is no longer supported"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "6.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f77d52e0bd3a39dbb6a7c98c893864d825b1bebe79d062f1349b99a691cd532be9f1029a6408b3082f4699e1d6e55423681928619be933138654ca4068320e2"
        }
      ],
      "purl": "pkg:npm/ajv@6.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0"
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a94c2224ebcac04782a0d9035521f24735b7ec92"
        },
        {
          "alg": "SHA-512",
          "content": "3aa96ecface1197f1cc9169342514c3f0f346d22551b6c7f7056fc64f85420b1a01e46bd4aca24082390829bde78f7abaa27593ab4f5e22a6a7c96fb20b716e5"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1"
        },
        {
          "alg": "SHA-512",
          "content": "0806e7afa473e0261090b614b52357c503d41f680af1fde259ec5596c9cc783f868e5b10d17b32d5c397fa637776dc58a26472db50a23b353c521c3a3b09dc11"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35f27853304271018b0e542aee71f11feb6fde4c99d211d0a85e413ba27bb4d25e3f9768d6594fafc759f331e89df840bb43c701d3244a8fbca34c3183d9595b"
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f66d238c01cfdc88bcfa0f38235651893fdf81ac95aee540c62bbd02da2c1e0b940121e15fd195d1bc68c48f6b9882b63632400086c4961c35a516d12ba195b"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        },
        {
          "alg": "SHA-512",
          "content": "d7535dcfb36ffa6bc00b58f492d4daedf01bd2f2f21865feacc1cd05842f8900c65341f0ee585cb4900da9b3e1bbd9d5f7f8b34ff227b53819ec89bff4b26cf6"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7acf783379d321fb043e2b1169f6a4f870cb7c75e7281855def5397aa3dc4b77e5216a9cc495a05c75e27b2dd8ae968db1a9d8e5e8b55686046cece28eeabd04"
        }
      ],
      "purl": "pkg:npm/json-schema@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        },
        {
          "alg": "SHA-512",
          "content": "65929298300414e8a311104b92661f27ebe6937c3eee138b603364442b91b8c246126a9834234bc81045c162953217f068417758e774665c3ce94fd60bffa763"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffd1c812cd595c68523c4f17e82726ecd6a6d73f0a7280aa3dd23b79c9b5377dc4cc07ad59a86f41656a2d9b5a650f880ca5f8232036a34801cea20c9006a01d"
        }
      ],
      "purl": "pkg:npm/sshpk@1.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.17.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/sshpk-conv, /app/node_modules/.bin/sshpk-sign, /app/node_modules/.bin/sshpk-verify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sshpk-conv, sshpk-sign, sshpk-verify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/sshpk-conv, /app/test/fixtures/lookup-project/node_modules/.bin/sshpk-sign, /app/test/fixtures/lookup-project/node_modules/.bin/sshpk-verify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b1fc5c4f9f43038dec89ee2ff2a07185b7f117e8bc8d6f148484f3d73833cbf8a07454f93ce9461f2f494c772f8a0a7bfe7e6bc8cf24b068ae423b0a956d64d"
        }
      ],
      "purl": "pkg:npm/asn1@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9e1485ed3f8312a22e8d2ea3b5d967ea011596b822a2d919fff6124b126b41e724cdafd0ea1569094427f6a92856ccf7803119ce802aead2c83f28bbf9112f7"
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        },
        {
          "alg": "SHA-512",
          "content": "2975c515d01b15763881e148c28c8d2be7f96756fbb307d70017cbec75c29a821630a5377664b6ebaef603811e42d0f32cacbb49799f06ee7526896f10ac2d18"
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1162f140c6a3a8fea1d6621298dacd9696a846a5df0fdb6ac163407404c15b592460e9c5b1f531e625bb0092f17ab9c262c9a280e5320bd56ab9967c6338e2"
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a83a904e54353287874c564b7549386849a98c9"
        },
        {
          "alg": "SHA-512",
          "content": "7a1f4efa1c111cd6c6e012d38c49779f0d38e029069b95fa2e86827fb2cfa7b514f10aede3b258362ea73d7f318d6f7b4ca18a9b5a2e72d834412a597bdaab9f"
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        },
        {
          "alg": "SHA-512",
          "content": "51553d7626ead897055b140f03a282aa3e4ee3654e980637cd051f10ac54d0aa53197c0da028e45f57b5dde1cdbf0ff13f29edea9534ad9d61b63593353497b2"
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        },
        {
          "alg": "SHA-512",
          "content": "d1fce3f49c4e2df27e5c62e147ccdedee9cdd0a642819c224920f3d7af151118caf1697c91549d72eda4b29778b38c2d01ad72feaad5462000d1672556cbb49e"
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        },
        {
          "alg": "SHA-512",
          "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        },
        {
          "alg": "SHA-512",
          "content": "6258f3edf7f23dbacba4b9e0accb59ecd76e52056f8bac06f5127d21473209de7d610f75d4f049a6138351c6ce55ba987f17b5c2e61ffcb27c3dab8c470b0cfe"
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        },
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        },
        {
          "alg": "SHA-512",
          "content": "ec40079722c7239e9510874ae7bbb01dd1ca21a0066e75cf8b0d3259b6ab41938a68aa6f508816d2359154b89ab6733e5d7952c2c6a72011ff87318c26e94ca3"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab15c8121e290867c72028f5980250dbfd975599230834dc1207e8490c5cfdf622bd46714e493b2f76c30494a836b1335c8d7ba143b90e9d3b92da84e4acdccc"
        }
      ],
      "purl": "pkg:npm/qs@6.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e52ec533826d647cb5d25df45931cd4a2c0ba077886a2470d3bdcda10c8c12de66407cc12e31b734dd2ba3305f8611ca5a5ffa9ba1ec9cc3a88ef09c15bf6fa"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44874ecf2a1abcafa1035f0e186583a944ec08b86d03b21c67fe8d0ace1f14968704369bfa90c3983201c96151409ab609deebd4ea10c4118a39acedabe86321"
        }
      ],
      "purl": "pkg:npm/psl@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        },
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e3483470ea0644e4932081cb4705c8d56a4d3cf8a1158522220f31674fd4bd69e826a7ce52fdb45e0554dbe104c5691369b49f64b9868d8676cd10e91b29bfc"
        }
      ],
      "purl": "pkg:npm/uuid@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details."
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/uuid"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "10.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a115c0a6ae78113463e1e3221731a71d61b2fb3a39adab9d8eec4dd1bf07eecfd1536a16d16becc7d3b400244dfe446af44f15bbf45eb24181e68de38be1731d"
        }
      ],
      "purl": "pkg:npm/fs-extra@10.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5d8277563ab8984a6e5c9d86893616a52cd0ca3aa170c8307faebd44f59b067221af28fb3c476c5818269cb9fdf3e8ad58283cf5f367ddf9f637727de932a5d"
        }
      ],
      "purl": "pkg:npm/jsonfile@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84066c2aaed8cb5d59bb50c4d0ecd68f0ee79cb6662596130d96721051d9754855f05907e4c09fa14d5731ac57a2fa725b99eae6c70faaad190cff59ca5d38a1"
        }
      ],
      "purl": "pkg:npm/universalify@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdoc",
      "version": "3.6.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21d43ca694a8e4b299f68dccf8b28820af22d340c87b99ac0ef1b71bcd4a9bed5d872d17ace583d098bc1fad44960c848ff3bd2912e892029b00cf575fd08902"
        }
      ],
      "purl": "pkg:npm/jsdoc@3.6.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdoc/-/jsdoc-3.6.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdoc@3.6.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdoc/-/jsdoc-3.6.10.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsdoc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsdoc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "parser",
      "version": "7.18.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "acbe7461c12e1db6dab80140cac36c240e3f7fcf5f19338144db3d3fcd6c9e22a7280af8c542dee4079ca2572c29b8bcf31bb40725980e3fd2d4027715216e49"
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.18.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.18.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.18.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/parser/-/parser-7.18.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/parser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "parser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "markdown-it",
      "version": "12.2.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18a30715fbf7e39f32632faffcdf208ee7c73ba31264a08e5e965ce465c8596cbcba57707e63e7f7cbe9f35819e5ff52570f1860172d81f276d9ad9dec038c79"
        }
      ],
      "purl": "pkg:npm/%40types/markdown-it@12.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-12.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/markdown-it@12.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-12.2.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/markdown-it"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "linkify-it",
      "version": "3.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d9418a9b885556b9fcc2c1ec6bbe1ebde123a29bccf677ec4997950d6a672f4057a32d8ff6614b735c7622ddc1dd23b3cc952f1e8c7dac95100e250df668d6c"
        }
      ],
      "purl": "pkg:npm/%40types/linkify-it@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/linkify-it@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-3.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/linkify-it"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mdurl",
      "version": "1.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "782e14f4c94872edaad0a4265eccf29f902471aff48eb426c03460a403096a2eea056ab86a6210859c8d6aee15606b427802ef5b5fcdb63cc9279ebb699c5f28"
        }
      ],
      "purl": "pkg:npm/%40types/mdurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mdurl/-/mdurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mdurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mdurl/-/mdurl-1.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mdurl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e9363e860d0cdd7d6fabd969e7ef189201ded33378f39311970464ed58ab925efd71515f9acf1026f2375664dd3a413424fb63765c1f6344392f6e6426711b6"
        }
      ],
      "purl": "pkg:npm/bluebird@3.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "catharsis",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6b313415a5c9ecfedcc5805564569e9a93a472919c966f782ef1c914a5de9891395a70e7770d71898c8a43e10eb3262ae2cef6a20234921e53ac03eeac361d8"
        }
      ],
      "purl": "pkg:npm/catharsis@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/catharsis/-/catharsis-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/catharsis@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/catharsis/-/catharsis-0.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "529cdc2c25e895459c36ee47b5530761d5c98c0ae3b05f42d1a367aae658638b96fd5bb49a2cb96285af6d5df8e476ae56f700527a51ba130c72a4dc18e636fb"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "escape-string-regexp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js2xmlparser",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea7e03f202e52dfd67e6634b40f45f562633bbd4404db9733c4b66d52b61317d4f8daa34afd608f67c3b6487d1c50304452f3b99cb30ae0fabfce62b3d15fa8c"
        }
      ],
      "purl": "pkg:npm/js2xmlparser@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js2xmlparser/-/js2xmlparser-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js2xmlparser@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js2xmlparser/-/js2xmlparser-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "xmlcreate",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9eab8e79b1b8b2780f9863c80934b9127c6a84a6c29b3e4ec7986cb332364fa539a9dac98b305cfb48a56121234d2cd4d3265c9afa69ced5deff9025e5f53076"
        }
      ],
      "purl": "pkg:npm/xmlcreate@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlcreate/-/xmlcreate-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlcreate@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlcreate/-/xmlcreate-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "klaw",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a60b04e34fd2bc2eecb74e001e221235ec1a20c51b63957f2bc6f6d5e9223e216862cfc461276c19af85240ac1d5de38d6eab843ccd9c88c6f03390636505d47"
        }
      ],
      "purl": "pkg:npm/klaw@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/klaw/-/klaw-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/klaw@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/klaw/-/klaw-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "markdown-it",
      "version": "12.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4dc84c7a66dfc5f355a4791bb6b89696d19673e9b7c6ccda443d0266ea7b185161cc8810ab121f9f77868f5c99a5fb9f9733ef7e4b7ad7507643f06c9356271a"
        }
      ],
      "purl": "pkg:npm/markdown-it@12.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/markdown-it/-/markdown-it-12.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/markdown-it@12.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/markdown-it/-/markdown-it-12.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/markdown-it"
        },
        {
          "name": "cdx:npm:bin",
          "value": "markdown-it"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "842c75a24cbd3c5ac9eb5d667f489f04b0515bc95451546516895be605917c810b69b0656e9f7166faea64b640b3e3711676df42878677cc0393282383b53ce7"
        }
      ],
      "purl": "pkg:npm/entities@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "linkify-it",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca74eccab152744e6867f3bd1847f4d243e782639f5706b347918a0eae8461f865a45ba0dc9db3c9b5f9e9ad8f451a5cf4ff85b92a06340c2395b0ecf632413d"
        }
      ],
      "purl": "pkg:npm/linkify-it@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/linkify-it/-/linkify-it-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/linkify-it@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/linkify-it/-/linkify-it-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uc.micro",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f18ef9a6f4d890b256da15901d7c68a91815eea6fd07ef6f144b6274c2feee4a075056a99d524067a70ab3e423cf9030dda6561cc0babb4c0913702dfa7486c0"
        }
      ],
      "purl": "pkg:npm/uc.micro@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uc.micro/-/uc.micro-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uc.micro@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uc.micro/-/uc.micro-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mdurl",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe85b2ec75a59037f2adfec100fd6c601761152e"
        }
      ],
      "purl": "pkg:npm/mdurl@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mdurl/-/mdurl-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mdurl@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mdurl/-/mdurl-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "markdown-it-anchor",
      "version": "8.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "525e1855864dc4c25800ba4ab6ef9945daebc98b7f1a543908afb89756e9fe0597386d9058496de80a85dcc8a1ff07d429d65b3406555c647bdff9fa53ff229a"
        }
      ],
      "purl": "pkg:npm/markdown-it-anchor@8.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/markdown-it-anchor/-/markdown-it-anchor-8.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/markdown-it-anchor@8.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/markdown-it-anchor/-/markdown-it-anchor-8.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "4.0.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1a8689c8439267c9ab6dd9f9fc2aa17f9c8a9933c9a1de846edbe979100346321bba4458e2486e7640d136796cc5308f781ea61280dd7ce0dbab80d1ba0b3b4"
        }
      ],
      "purl": "pkg:npm/marked@4.0.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-4.0.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@4.0.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-4.0.16.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/marked"
        },
        {
          "name": "cdx:npm:bin",
          "value": "marked"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requizzle",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61a9e8c898f290fc461e28b47d93f4b943c45e9bea7c10f1595eece862808a23ac8aa857eaf1cdc96dd0cdd9aaa7f8aafc4c5b85a19b56b8c1e2bb8455233819"
        }
      ],
      "purl": "pkg:npm/requizzle@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requizzle/-/requizzle-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requizzle@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requizzle/-/requizzle-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9f3dcf91e22870a8fe8dfda22fd9fd60307f25395b56407a2a0b8c8aea8483555a1cba602c7c2aa39179ea89832198cc12fe61072e9ed57a196ddea97a9448a"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "taffydb",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7cbcb64b5a141b6a2efc2c5d2c67b4e150b2a268"
        }
      ],
      "purl": "pkg:npm/taffydb@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/taffydb/-/taffydb-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/taffydb@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/taffydb/-/taffydb-2.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.13.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42f8e4629883f9d249ada440f3e746014e22eda05b6f6b344b78c0e394c53af836560aaf7420ddff737a0aa03c825ba4d56f7518ba178397a7314c79eb4433b8"
        }
      ],
      "purl": "pkg:npm/underscore@1.13.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.13.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.13.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.13.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "9.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fa5c2dc47704fa62b224d325e96afbcb927f21f8453e63951c0872840b231b754231c8cb998f86d7e14f5ed67be7bd452f415b15d951d0af9ccb75c524856fe"
        }
      ],
      "purl": "pkg:npm/mocha@9.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-9.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-9.2.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha"
        },
        {
          "name": "cdx:npm:bin",
          "value": "_mocha, mocha"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@ungap",
      "name": "promise-all-settled",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0bfdc12f2560270a55f0d301e4f39ff62f41ba4a3f140740ad7354c431b292b26a51a2caa1c23f605a0151652ac1af67fdb625c84b036108f9a57ea52ac9bf5"
        }
      ],
      "purl": "pkg:npm/%40ungap/promise-all-settled@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ungap/promise-all-settled/-/promise-all-settled-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ungap/promise-all-settled@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ungap/promise-all-settled/-/promise-all-settled-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2685f46a919b1da50904d97ac85fa9e89005619ebaebf86108628de6df501636c940a514fe0f0c35b1436ef7eb80a5ef23542966994f3a7c08a3df655ff00098"
        }
      ],
      "purl": "pkg:npm/ansi-colors@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-stdout",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983"
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-stdout@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ebdec7ca44fea84dc8dfd8999498525f79532f5c175e83107489543979bd95d74b852540804bc381c9975503255bf315cdcf71a38d3823f642d6b194ea13a93"
        }
      ],
      "purl": "pkg:npm/chokidar@3.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f8dde3df38022ea6482e1d4c9cadce2a27d933f198ae3948a36844f05fb4c7b7463f18d2bbbf469af2b63cd7ac568d9eeb25d0395dd31ca5515328cabe46f5a"
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64c11161eb3aa43c9dcae1a276c7bb3ac1f1b5b23b595794128ce047f83baddd31522998365bd9444fcad8c8194e35b2ef6e487de94b79570433dee69ad4465f"
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c372d27f21541b6682729287876e15e93a5341a8635cc1724a268838d84e470cf53041349d8c21dd8a18e3d0396785e43b6e56d3e9d1ce69f340892f28a1028"
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84e4b4f3da27f1176ea9d6e1bd0e59dfb0341128ecab3eaa9d171f7ec314df8f7916e4dda929beedb849dbd26f20eb010c41276a7e433eef6ddd3a3d55194ccc"
        }
      ],
      "purl": "pkg:npm/readdirp@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff3c70e7ebe1d537effb8427edae67b1b70928f692bc20e1a239fa14497dbeea702b6542483b44884b6aafc0c5b7360539dcfadcb064c5e73b0d8b9cda3a27e9"
        }
      ],
      "purl": "pkg:npm/debug@4.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.3.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 2
          },
          {
            "location": "lib/command.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 12
          },
          {
            "location": "lib/generator-features.js",
            "line": 1
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 1
          },
          {
            "location": "lib/package-manager.js",
            "line": 2
          },
          {
            "location": "lib/resolver.js",
            "line": 6
          },
          {
            "location": "lib/store.js",
            "line": 1
          },
          {
            "location": "lib/util/namespace.js",
            "line": 1
          },
          {
            "location": "lib/util/out-of-order-transform.js",
            "line": 2
          },
          {
            "location": "lib/util/repository.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd54c2aef9b9674246b72fc158796387e0408b0dc82beda3f3b34632ef0dc1cfdfe3c5a80c00b7f79ba898ef590f5d7b64e05a1e6917d68c8bbe454cfda213df"
        }
      ],
      "purl": "pkg:npm/diff@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-5.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 2
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9662dfea0b72acfabcb538d29ab3bde3005e41b151dc76cb1dbbb20faf70bb2424226a76856a8c181e3b397eb914190f7df3bae3520ff6359ad73e22bea1b6e9"
        }
      ],
      "purl": "pkg:npm/glob@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848"
        }
      ],
      "purl": "pkg:npm/growl@1.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17fd439d418fa29391662d278be0afac28074391721001d12d2029b9858c9ab6d2c28376327ffb93e1a5dfc8099d1ef2c83664e962d7c221a877524e58d0ca1b"
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/he"
        },
        {
          "name": "cdx:npm:bin",
          "value": "he"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c29c59b3d368c596891122462194f20c4698a65d0529203e141f5a262c9e98a84cc24c5083ade1e13d4a2605061e94ea3c33517269982ee82b46326506d5af44"
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/mocha/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "4.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f54ab50a1b5264ef8cc5afc22f57868b39f6bd19f73252e0ce14f4233f33698f0d76fc6f07477941d3c598229fec9280f4b7abc79bd1ae7c0ed378ec49f186f6"
        }
      ],
      "purl": "pkg:npm/minimatch@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-4.2.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fa56cff7286cb13d077ab8ed1e1f806fd288c6494bee2e5207b42dd8d2410edb761181ef07f71d460b32e7dbc617d07ebaa4c931b9a784485ab8b4a2122b077"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/nanoid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nanoid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42bdd3a2cbe0b85b7c78f5aab2f45facac905c8896fa719b629cbc5cadb83501c4f3771ac56b7e988ca64d3d7d0c615b35634b7c4c2cae44a637ae2555607d6a"
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "workerpool",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46c939a901c9f5ea30307dbc27085ef0711b99d6035f8970a0c5ac862097ba08ed1ea303f596e2a920cbc5cb1f76ab044cfcd552d5f9b35679912b6220cea5e0"
        }
      ],
      "purl": "pkg:npm/workerpool@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/workerpool/-/workerpool-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/workerpool@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/workerpool/-/workerpool-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "16.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f59afbed0c6d0be5fb7f8c65a42e91b5fa6d1e43139f681bd33442eb6968f6db049550c5b1654bd880961c2a1ea3186224245847e0864f4214784caa5cf2607"
        }
      ],
      "purl": "pkg:npm/yargs@16.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-16.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@16.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-16.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39c444ebc70eb15317a7562fa2797f7f39103b28cb4aeffc6e13c37d0b747b4fc46f6f374ca3f6d05b3632aa0fb2bf52c00e7de6b44203e40ccd873d9c13fe25"
        }
      ],
      "purl": "pkg:npm/cliui@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9347abda05242dff0ed332898808669139c9953bc8346bfbca00cd3db788b17fd3263189647ba1f41d94c5bb1a1249a5128f4c7e1ad2ce68489614652361979f"
        }
      ],
      "purl": "pkg:npm/escalade@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "5.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d297c5cde81e0d62472480264cb44fd83c078dd179b3b8e8f6dbb3b5d43102120d09dbd2fb79c620da8f774d00a61a8947fd0b8403544baffeed209bf7c60e7c"
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58e92980d84f4e513bde1e1514016c3a7a262556a8bcef15a8b0f3cb9b1a0a1441150141a0c622ae8c325be43d1c1e07145e19ed5653886de24b3249036f7244"
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs-unparser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee9453200f5073571a6746d9e9161119b1c9b61256b9a91ff969872b4ad578b90daeb1a17e869b04d76e7ba91d20d23aaf889fee872af5a0ff9fbc7028e77338"
        }
      ],
      "purl": "pkg:npm/yargs-unparser@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-unparser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a6cba161625098eee3849595126f1a365020c7f28c0493df7a8246eba6c806b6b24b33727b8c6c65f4873b430c23e22bce13901665644c79c0dd17b86a1a314"
        }
      ],
      "purl": "pkg:npm/camelcase@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f621353e04a293d1de208c3624ef78222767137781a10ac5277c3bb05bb3497e03a66677bf9b19a54895e52c1c7fa990105f98d2bbbc35ea3ea7e9f287627e85"
        }
      ],
      "purl": "pkg:npm/decamelize@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fab2e103fb9ff7ad3a5405d1b582ea4897c30f14200c034417c269632e1bc250a714bdd138816932f73a6e1827171ceb33e09f703c6356aba38aa66233cf785"
        }
      ],
      "purl": "pkg:npm/flat@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/flat"
        },
        {
          "name": "cdx:npm:bin",
          "value": "flat"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6169dfc91c312fff92b2b5987cea54b73e5bdd80fe9f27e41ef8db71a9f393cce0c8ee00483ebbb95311b7c9396cce252cc0e75dfae24613a97a6c3e35f4f578"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nyc",
      "version": "15.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8cc5b4e27f52c4a74a8b564c1a1bd44c704dd042020919077a61281398e6ea64d872a71d6acd004f381481e8e54141ccbe99ce66a181e57c6cbfd2b1256d63f0"
        }
      ],
      "purl": "pkg:npm/nyc@15.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nyc/-/nyc-15.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nyc@15.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nyc/-/nyc-15.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/nyc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nyc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@istanbuljs",
      "name": "load-nyc-config",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5637874a5233a6ffcdc83dcdd18b877d738f0c88b1700d6ad9957df30b0ca9c6253e6bf69f761bda560ff5730496768555783903b60b4de2eee95f38b900e399"
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-package-type",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cee2ad63ae0661f5a2ccd009d1fafd56ab6d6643622b6892e37d0bb481f38c112be9b5fc026db39b8b16e11a39c23596e5c02544bd6a00c4dc5db8cd00ed9"
        }
      ],
      "purl": "pkg:npm/get-package-type@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-package-type@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9883d28fdb8743e6a91af49e3b774695932d0df9be1f4d4f3d2cdf620e78c1e706a4b220b8f6bbcc0743eb509406a13987e745cf8aa3af0230df6a28c6c5867"
        }
      ],
      "purl": "pkg:npm/resolve-from@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@istanbuljs",
      "name": "schema",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "657458e2336f56049543c0cbdcb4dc6a4680b57c13554c44f3586c96cc83d80b685d6ff05686f5d0790e2755ffa4095c23b0fed98a192a0e5da3c1bfc3a45880"
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/schema@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caching-transform",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "929a8ebf05e78e3378e03f3d2b971c402f9152bb32ee307f5cb951af1d03effd8735c4cfab3b1be97818a04af0928e90b15d7ce020366204b57f10e288364c58"
        }
      ],
      "purl": "pkg:npm/caching-transform@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caching-transform/-/caching-transform-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caching-transform@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caching-transform/-/caching-transform-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hasha",
      "version": "5.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eba79bc82bfc6be5291e376a273b7d87d0c80d6747f5ec744d1f7f567cbd1261434e4d9e4bcf54c9f0f6a3a3ff3b7581841652cc9bb98873f93fb3a06fcfd1d"
        }
      ],
      "purl": "pkg:npm/hasha@5.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hasha/-/hasha-5.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasha@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hasha/-/hasha-5.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1d6f3233aaf8ed822339af0d64e6b107b4100d2a676e7611b20446a3374d5f13285a00886ca0a372eb2efe20df7721fa45b7063d8aa8bb903fb1c0a850b0d24"
        }
      ],
      "purl": "pkg:npm/type-fest@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b"
        }
      ],
      "purl": "pkg:npm/make-dir@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f"
        }
      ],
      "purl": "pkg:npm/semver@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/make-dir/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/@babel/helper-compilation-targets/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/@babel/core/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/istanbul-lib-instrument/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/eslint-plugin-node/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/@babel/eslint-parser/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/package-json/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/semver-diff/node_modules/.bin/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/composability.js",
            "line": 2
          },
          {
            "location": "lib/environment.js",
            "line": 15
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 4
          },
          {
            "location": "lib/util/repository.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-hash",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c217643c8a284aefdb01282067de81595bd94d130e1719f2506e4f9d34862a8244da077999b54d991d8d8f6d10173c58620017a68a82f80897ce5f9431187bcd"
        }
      ],
      "purl": "pkg:npm/package-hash@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-hash/-/package-hash-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-hash@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-hash/-/package-hash-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.flattendeep",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb030917f86a3134e5bc9bec0d69e0013ddfedb2"
        }
      ],
      "purl": "pkg:npm/lodash.flattendeep@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "release-zalgo",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09700b7e5074329739330e535c5a90fb67851730"
        }
      ],
      "purl": "pkg:npm/release-zalgo@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/release-zalgo/-/release-zalgo-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/release-zalgo@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/release-zalgo/-/release-zalgo-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-error",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "526ffe17132bf422125a1d1b8b966fd22383fb8705879a8b7a4b35aa1028a4a540270dddae029b2b24a2929ef01a10cbd073de6a36b43f950b66bc4b92789456"
        }
      ],
      "purl": "pkg:npm/es6-error@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-error/-/es6-error-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-error@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-error/-/es6-error-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f1dcc99e499d27eade2a12ca3ac1907f725b89bb03293cffd332fc30fda2729ebbff787f0acca1c7a63b64002450259e70cdf990d2f998c0479b9ad7f3d5fd"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray-to-buffer",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cddbbc5cc3440dea4a291f9760e5c054fb56ba2d25cb436da2152c730f9499a1e20164fc86b575aebfff1fa57ed03bc9dce435f52f7bf4cd2568b7d7f2b9bcd9"
        }
      ],
      "purl": "pkg:npm/typedarray-to-buffer@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray-to-buffer@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8e41d8cfe3dcd5888ffa8bb9c826903cac0978b15fc974f7d4f6766cdd5a8ec062208b3202bee376aeee9f31dfb89652f4b5aaf5f146095df67f4d6b668548c"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c17655e5e985123aeb89d220103d753a850a2f18988c072aa2dfcd25d0243a1949faf1b3c213807dc1b9397d633fe4b43dc8c49fc6dd309bfe8368f04373a78a"
        }
      ],
      "purl": "pkg:npm/find-cache-dir@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreground-child",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74222af45a447324325ca0a4cb39a53d314d82b0b33ee74e7be9a1bc9539cc0b65067195cb6c8ac6d7ecc4adad4014e1c2adb6e6372f063a70d46af8d2ecd908"
        }
      ],
      "purl": "pkg:npm/foreground-child@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78e789e411c298762f40aef1b7d1a4747bb3b82192d58ea0f46be7c77626df77f3fc7a4b458c624b4c0736bfa6fcc042f01eb8ed7b7ad3cbc20c4be197d73a33"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-hook",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3edfee81ed50f6cfb954067ea42a35e9360c58f04897ea1a3488e02d0c5c5f48ad4bab9e79a03ea447d3859a47f16c611600a211bf2c00963a31d50a82221669"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-hook@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-hook@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "append-transform",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef27b2084bab44e2d0245bf95e3e251064f2d1ba2bc5ea6316fd60db6a0076a16efff4ab0250e5d4ed4dc71d79487d51a258949a5ea9f1dc095bd8ef66e82186"
        }
      ],
      "purl": "pkg:npm/append-transform@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/append-transform/-/append-transform-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/append-transform@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/append-transform/-/append-transform-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-require-extensions",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a4e83a57abf482a6f8e1a45b0b15156d231242470e9f511e3695831566e50c2bb9fc78ccf8521e5c95c91d0631292e19ff804059a3b84326725cc1d28b2908e"
        }
      ],
      "purl": "pkg:npm/default-require-extensions@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-require-extensions@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df1bab16fe6d1208a2df7662f09b69e79c042082d1f5e877e05016d343d97fe2674ac4e657f8a87b04a0425f7b247be08e8446c0f4a1b169be21daf1077e5dd3"
        }
      ],
      "purl": "pkg:npm/strip-bom@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05781097d91fe164c23c20a99851a8264cfffae86f9bb87b3c529463187ba9aad0777111df7bc71bffea684f1e376e65d3b62a64fa475d4f48d3d97f443e5a19"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-4.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@babel",
      "name": "core",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03ca6b8b5609882e549e476b59c99f65325357ce5be145d301f2261a609f6266b1e1347d0b0f2c0d2d0c3a4fbe1a9da613f05e7d52799f0cb9cb3a8d25b3ff0d"
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/core/-/core-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/core@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/core/-/core-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@ampproject",
      "name": "remapping",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a919a38fc9e3f6a98b4d05d799a47571c93751749130fadbb0b2406ac66917eb77ae223bd415de77979b20e630427b7291e66e863b1dc1e11cf41c47e49736eb"
        }
      ],
      "purl": "pkg:npm/%40ampproject/remapping@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ampproject/remapping@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b105c26ac164f94f2559811eeba5b1443384f4f8d5cf8bd2339d5f4eedc7c3e0a54e951241bef5f3bef6bc7de9c92e694a1a7a96f40ced2c602035d75e6397ef"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ade4ca9990b1845d35664186c6b71f5256a0f67eac2f76e6dda6ce43ddd8e30248242b04fdd7c54d3b3eb9a441c56984de59cba4989987e52c2c03d4e7d8e6d"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1abca238998d7166e8bc1c537d9485ef557f9976e0715dcc7b00dede420c08bc888797bb48a01e519b3eacc9c9f2390ca2567fe3f56c74198caf0de5f95759df"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a35c5b2a1a7daa7200a0725259de8a94265faac94be2f6a5485f351fc2268a8380c65b966163a95a4a7292d636be7b78b5bad7f5761ac68beae9c828c1a269db"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1c5c36810473abda943b8fbed8e95a795434f6b08a96c96439e938c4ab88a1fdae22493ddd22d45ef10f5fa74aeb225f43a0a85642d510cff6293b12e45db34"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8805ea527f0821e05335def6c6c16581a5c790c04cb7acb81c9a75b4868ae3ae4258b4ff7c6d5aa81ef292bf798071e69417466c579659fc81e0d249d2799e22"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "highlight",
      "version": "7.17.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef2ca431517785f658da3b076441202dcfb7c78a353be7d8c942eed751b29c451037007a96e6be208427d45889c4db9c779525c89af2af0b0e87c3cbf529fc42"
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.17.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.17.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.17.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.17.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c12715e99e896e03d3c039814019c4b0535e9677f4ff9af83183b07c35cb1ab243f8f31449f17f9b93106a7eddbcc06cd3b1535a5a4e0612e04094fc881f0f"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 3
          },
          {
            "location": "lib/environment.js",
            "line": 5
          },
          {
            "location": "lib/util/log.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5d454dc2199ae225699f3467e5a07f3b955bafd"
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "generator",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b5946e6f53016f7cc77c1d55ea75f6ee1bb46e692ad30820fc725f1f3fcc0e8af75bb5b220d836f721651c82f7f129b6e7e990466115bf664d4c2302b8f6683"
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/generator/-/generator-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/generator/-/generator-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "types",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0e9fa07c038ffe98552da3958446ddc412e1b53739c38abbf071ad4ef14c17407558f20dd1ececd88315dd39f3302ced3c52ba540ffdbedc1725caafbf0bde1"
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/types/-/types-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-fast-properties",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc5e698cbd079265bc73e0377681a4e4e83f616e"
        }
      ],
      "purl": "pkg:npm/to-fast-properties@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19c1f09e2325036cfe5853d6b98f25a777eccdad08f313c53162f9fa7f0b6323fa3d2bcfad77f8fa7f2cb431d96360ccd33cbdb159110f2d630c8e171b3615aa"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "398bbb5c4ce39024370b93ecdd0219b107cda6aa09c99640f7dc1df5a59dd39342b42e6958e91284ada690be875d047afc2cb695b35d3e5641a6e4075c4eb780"
        }
      ],
      "purl": "pkg:npm/jsesc@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-compilation-targets",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b358e73e8b494bdb909f316d8995415317baec2b816baefda16147a716189d3a512ffd5f7e1c97e3847db98897a1afe92d7718f47da6a09b5ad2269a9e593fad"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "compat-data",
      "version": "7.17.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "199b7f4c2b06ef432cd7d81f64ed6d3380959d7b0f8043c10a926ef90cf72f42d40ec6399d9a85660948a0f0b590860eb4d05996b9c54fe925835daf146657af"
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.17.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.17.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/compat-data@7.17.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.17.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-option",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d1b5e9ceb91515a3da084063c2e46f4380ae3be3771dc6fb4ec34c1e40da595da4b5e920818b930d8d917cbdb6b71135118d9a536d59fb56f71fd9e030168cd"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-option@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "4.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "341872981425d733346397504ff3bec622cff7faf338841d28cfde309040abbc8181a07a92b2182c67a3af05589d21d976a8ec701d523ee0231f0c63bcde9676"
        }
      ],
      "purl": "pkg:npm/browserslist@4.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-4.20.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/browserslist"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserslist"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001344",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d191639e509a5cd38061c57b8be4ed74a069d0bff75c4536305ff1e83bb596b87e4915f821fcc854be07349839a41d8f9856fcaeccc81b23afb199eaa91a1cda"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001344",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001344.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001344",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001344.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.4.140",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34bcf9bdaf36dd07c905838efe12d5e007d4e02ae6925ffa1e5da91f7a9d25c9a2d32499dd84d61f13a50e6dee24e14110fcb7a4886ef20290a3aa6b41358a28"
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.4.140",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.140.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.4.140",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.140.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-releases",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53d87534b44e653abdb84d5235f7e7e96b8f0e0f227268b79ece2b125fe84df2257b888b8d39620b3813b1b68814cabf5e7d3bf3f95f63f04bd06599fa9b0ae1"
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5fca0ae84cb947bbaeb38b6e95a130eff324609b415c71e72cb2da3e321b19d03fc3196dac9bc13c0235bb354e5555346de46c5b799e6a06e26bf87c8b6248d"
        }
      ],
      "purl": "pkg:npm/picocolors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-transforms",
      "version": "7.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91c95461250122396f9f3376fbe2bd7f6ab360a1608e69e68f02f8ce5994e5ff19b738167bcb34ad43d24c6cb61e62b83fc4f9d8c42c4be1d340081977774c10"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-environment-visitor",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d78190296917f682733e2410eff277e854d7703e244a9f1e80a8cef6720d9522a21c84d103dabf47be2abbc4bdc6573f6ffca3b0922d41479e877c6718dd2fa1"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-environment-visitor@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-environment-visitor@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-imports",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d5b52e93aa324715cfa761e213468e952d7bdeef4c66abbc0f8564ea0c9bac2448069a4000096c0c89336bbdfa10a3a844845c00222c4d92f0748cf5c32fc5a"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-imports@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-simple-access",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecb22b8d8ce7768ac363cf0cc9cba992940b292d4015fb15466da4ffd3ed292712cb9b59ab431c6538fe0e2311ca76e865f22a38abe8d37a668536948220fa7d"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-simple-access@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-simple-access@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-split-export-declaration",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b5a8cbf3c5a314966b3213a13f5289ffa325396b31c9dd22c68e2af4c0eaeed0128ee2964459a637b0d7cfd6ddcee79bc7d77540d7874d955d36d9d2918337"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-split-export-declaration@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "template",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23c8ffc7c90752b6d84535315ebacc6df09aee3c6413bb59adedfdc77923afd86f23cd9c2b515fa8bca0a2d71637991d3c659c2dd58c1e94816afb1ee6d5b0df"
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/template/-/template-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/template/-/template-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "traverse",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5e370a1ea2f27a287f7370236710d63b0cc1704d4f49746085b6a34b7d402ab541d108eb133aa5a87dfa2c3fcbca98d61e48152fdf25495e37ddf2e7303a350"
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-function-name",
      "version": "7.17.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edc462b06955b6256a674316d3fc850786ad82918b5841d45589dbe38f2164ae31faf8a1d183b95284b5d57218b5962a1ddd1d20f31d512bfcab92b82dd32722"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-function-name@7.17.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.17.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-function-name@7.17.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.17.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-hoist-variables",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b4e1dff43a9df81f9bfba5b670ea948a3fbc1e03a96c32f7e220031e22f918fd1e3142d05230512282ef504d9daa07ff65db6becc6d33c6be43c0b30f6e797e"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-hoist-variables@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-hoist-variables@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "11.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58e069fc410652222c252a7bc1cbffcba30efa557d5289dc5aac6e15f9bc781c3358d8327c177a1b3f8878a43d8c29b28681fdf60d793374fe41a5471638b354"
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@11.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helpers",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8fe77ebb9c53e6eb5c412ceb87da7e3da257f7887ef8a37e9e0f5bf56109abba6450f01deb5146aa18ee50475f9276f713fb8305beebbb011e2a42313493c8ae"
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helpers@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de137b35ab2462f3032d0639e609d6dcd43e99eb0401ea53aa583e5446e3ef3cea10c055361cdc19861ea85a3f4e5633e9e42215ca751dcb0264efa71a04bcce"
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gensync@1.0.0-beta.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d61a8b14c4ab187447c5abfdabd80d8c9e445f39c8c4654ed3dc5046bc2995c4bcaacdbca59f2cf21ba96409aa0f065499567641bda39f23ce59c0c7f26f1d94"
        }
      ],
      "purl": "pkg:npm/json5@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-processinfo",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90ec296bbcfd8667be2013d9333439bdd423f2cad8800b5a46a788e3c34698043eff9c8a8872d5d106d8a90a71b1d105d3ec35e12a01f186e71ca7171362a763"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-processinfo@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-processinfo/-/istanbul-lib-processinfo-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-processinfo@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-processinfo/-/istanbul-lib-processinfo-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e0fbd4700a0ff4a77dad78a74630f4cf9d55ca0f4c370df1e71537e2728cec020b2fab65de9cf26afcc629cf343fbfcceb3b2267e83b37f550382480f015fab"
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-map",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "777a9755317fb3e5be09d279036f70cb05769fc0904186a1960cf66c5880fb87953496c726874f67efe05f03c68746cea80fa3f12fbaf9c926bcb18f935429c5"
        }
      ],
      "purl": "pkg:npm/p-map@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-map/-/p-map-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-map@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-map/-/p-map-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1c762fae00acdf8864f669b3e9299d21494d6b1908d44272efb58e4ca50ed00936a10f754e0e172ee3071f63562d9066830f9caec9d38b20d5ec7dbbacf513b"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f7b3c13091d1482421b704f28162fb248171a8cbcf00473bde8248ad93ad0dc5177096d2ce4da1fb09488c457bf0628ae5d10ef5da212371607e7cafccad657"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af5fc3b2137829213bc561249d92cb2cb0e7e422726d5de7c34d554e4a7a0f98f32ee10b95c6ee75f8ff792405beb2ac26e4d50869de3ceee1a3cd8dc3dcf37f"
        }
      ],
      "purl": "pkg:npm/istanbul-reports@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "html-escaper",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e"
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-escaper@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-preload",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44ce68c81cb8e5c2c4a07a827a1f8c36e140c4ed2f4c504bb24bd06ce2a7104ed84d348de2d6cdf1058320f43a2fe5af2ac07fa8b106a587b6659f5de16f4e21"
        }
      ],
      "purl": "pkg:npm/node-preload@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-preload/-/node-preload-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-preload@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-preload/-/node-preload-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-on-spawn",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d56b0f0ec512326647e4b78c2de82a90f0ebb0682c5b09351318a9cb686f074a3f174012cdba4872d48271920ad72909bed4c950b107fb6d163858ccbc69c24e"
        }
      ],
      "purl": "pkg:npm/process-on-spawn@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-on-spawn/-/process-on-spawn-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-on-spawn@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-on-spawn/-/process-on-spawn-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fromentries",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7071291101d48347fc5ddb5909cd99021ac7ccacd3d0cac551372fc7e85fc58bbbac630373948aa17161fa7e188a0c6c1d747373a3ab0ac85d4756d61fa1c7ca"
        }
      ],
      "purl": "pkg:npm/fromentries@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fromentries/-/fromentries-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fromentries@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fromentries/-/fromentries-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spawn-wrap",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11e6a33637cdf7332750b2f085965053719606814d91b9e04d43df69ac13e1190c8af893c5c5f4a9f8556c67b2dfd99f72d7c31e45adb9e72043c3497324161e"
        }
      ],
      "purl": "pkg:npm/spawn-wrap@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-wrap@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520"
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7001963c8c8e1d4eb396683cf23c26ed54725e730dee257af0e1806d80e4fcc87fc42fe9cd53e542d63a9e0a081ffe7fb5c8ae8467ef11253c1ab1eb7310f9eb"
        }
      ],
      "purl": "pkg:npm/test-exclude@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "15.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69e3dbc4399c616fbe3daa81b09f8761417009dbf82d5bdd9e1072efc139ecf228afcfce56f84cac00c51440e1f031c3151bff3bd8b794f86c10d8ceed05f4f8"
        }
      ],
      "purl": "pkg:npm/yargs@15.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@15.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7ac1b82da025ef033b2ded0817c4962a3edd2eb047db81075fb443db2cbfdcbefe873c4e5582fa82b80203474360539d9db3aac5c2aae06a434bac712309bad"
        }
      ],
      "purl": "pkg:npm/cliui@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afa94f7011b1657948732984bbb227c43321756d0a0f1a4b82814b720b9ab3109a27f48e219c0835ab4af4a63fb5ff99ae5cb038a5345038f70135d405fc495c"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34a37990c0f294aba577160b4947eb6e8e53bb387885dfb613c34f3d7d36999b67d55b911104e861efd9765272f89dee0a97da886174e5eec1f16d225db4079a"
        }
      ],
      "purl": "pkg:npm/require-main-filename@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24a86a4cec12aea340d4d639952ced2751ab06252874b326219b8b88368c449fa2b4577e001544f170633af2162fead2a8d0c2ef82c24859a56ff538519e2125"
        }
      ],
      "purl": "pkg:npm/y18n@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "18.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39d23d09793a32ff82ba39971a4265ba9725d72a1abb72c4445dc0f0936a2614f244c1434e56d24abe60ebf442357c025953265c445ee4c460569915ee76b09"
        }
      ],
      "purl": "pkg:npm/yargs-parser@18.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@18.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "prettier",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e452917eaa85d3aa139e58bf5fbbb02cf0b5ec214675598689898fdaecc700433c6393cd8e174b626e41575420c8999b56c5bbe88c58deae488b6f4feaf267b"
        }
      ],
      "purl": "pkg:npm/prettier@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-2.6.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxyquire",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05059f0aa60cf9020d77ec9ac09cf6ded6c1338d152065ce743c375f7e3829c72523f82d05b75617a4a54389cafdb62117d776eca62e83d5b39631c2e81f58b2"
        }
      ],
      "purl": "pkg:npm/proxyquire@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxyquire/-/proxyquire-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxyquire@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxyquire/-/proxyquire-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-keys",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a8fa36f4e8ad634e3bf6b4f3c8882551452eb20"
        }
      ],
      "purl": "pkg:npm/fill-keys@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-keys/-/fill-keys-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-keys@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-keys/-/fill-keys-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-object",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dab4486a1859af65166f8e5f20ebaf646a45b73d13c8e64b7f7d8ac416d2a1409e651e3de7308a95650a29407293781e4b6780b3b640001b7463f471d0689018"
        }
      ],
      "purl": "pkg:npm/is-object@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-object/-/is-object-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-object/-/is-object-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "module-not-found-error",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf8b4ff4f29640674d6cdd02b0e3bc523c2bbdc0"
        }
      ],
      "purl": "pkg:npm/module-not-found-error@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/module-not-found-error/-/module-not-found-error-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/module-not-found-error@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/module-not-found-error/-/module-not-found-error-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e1b6bc349cb792ac543ba613e9e0e39c5632cf21e327465af999c9d5b8c7bb33fede067f7c0378661512e8168dc32d9922bd26308515094f23f2580939e962f"
        }
      ],
      "purl": "pkg:npm/resolve@1.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb914fcb93e7c263b796f7cc6f402ca0f6811bee4a1d4234c181573ad60f9d5555b294c552e31935f35a35546ddc565a76cb6ed9cf31db7bf29115bf341a14e8"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2dd169d74bd7e076480871e3dee911cd935580f3e9ae3dae9c4a3791dd5f0adbbabd041d6b4c4dd1d69ec7bf4cf567201cf2ce95beff0323259febcd4c02dd3"
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sinon",
      "version": "11.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7ddb7ec70a19ace2483bfec5e1891714cdd4a42aec9d0de4e26a64ff8deb14547b210602fc5c09a1805a3419f2ba46bb8c0ccfe24528a3d44c9b98ca20f5c27"
        }
      ],
      "purl": "pkg:npm/sinon@11.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sinon/-/sinon-11.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sinon@11.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sinon/-/sinon-11.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "commons",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6435c2c09ffc19697d7844f9708b370a89c0e4f46dc5f26da75372fb5249b9cc1813c224f4c2ca05007c7d26ae7a7c9035cffeee286b4246ed7ab0e5022c81d"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/commons@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/commons/-/commons-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/commons@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/commons/-/commons-1.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1faff9881f57653bec7b4e570ccbe6c80ea28fb30ffbd2d5727875bbf3b828423866a9a65ed74bb02ee8ee6caf6af4b83a162868d4a50a0d8cf467b93b839fe"
        }
      ],
      "purl": "pkg:npm/type-detect@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "fake-timers",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "890003b16e0b04c212a99e828b576ea492fda69aeac1c5454dc3ac12640e1215be28b0959ff63826bbe0da4d7d7c81c2a7e885a6bae260f4dd45c411f0d6d43e"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/fake-timers@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/fake-timers@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-7.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "samsam",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "719eeb2894cb884eeeed68bfbfd1dcd9fb3751c7378eb59e3203c76db4c2795001d92d303816d896425578d48bd388bb7dd853f3021b0ead73842fcf5d30f648"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/samsam@6.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/samsam/-/samsam-6.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/samsam@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/samsam/-/samsam-6.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.get",
      "version": "4.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d177f652fa31e939b4438d5341499dfa3825e99"
        }
      ],
      "purl": "pkg:npm/lodash.get@4.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.get/-/lodash.get-4.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.get@4.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.get/-/lodash.get-4.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nise",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cabe645b64c75b5024c559829ca121e276d8909741dc8ecb52489480ebc490ea78d7899cd9431a1cc03ba63ab59d8a3085da09646c0428669055bc5fa568f5d0"
        }
      ],
      "purl": "pkg:npm/nise@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nise/-/nise-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nise@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nise/-/nise-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "text-encoding",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa24db9edc362193dbfda9d50dbca9cdf41af9acbae0c5b4668f1a27c8193d630c2bafceb9b3156fa9543cc6a0aa338f9e6b5ab979c50800959773bba208dea9"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/text-encoding@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/text-encoding/-/text-encoding-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/text-encoding@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/text-encoding/-/text-encoding-0.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "just-extend",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "837501efdeaf505218f74548bff597dcbd9cf024b631d594c30dc236b626ab36b5160d035117362bf3b862b9e49417506ab489ff2f099c960319cfb58ae9908e"
        }
      ],
      "purl": "pkg:npm/just-extend@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/just-extend/-/just-extend-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/just-extend@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/just-extend/-/just-extend-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f8dc946195429402589b10984f7a2af59dc5080f5e909c48cda70ccd74edcb9b8cb0ac1a41679a0b0f423a6ebf5ebebd58f494eac11b4087b24ba0ecc041d54"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        },
        {
          "alg": "SHA-512",
          "content": "0f64bedc62f1587fae86b34472887f7e799878ff04f3fcc797ae3877f8dd034836bb25efcb7b1bd2ac68b44fa77b42ed71c1e49d0cd6c1913385a93ba09d0239"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sinon-test",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c10ef3d55b6cfcb80a22b9ddcda9cebe7bcf965fa51307580f42e6172b4d264a7a7d9bf258c9e2dd0632e5a9b9e4d43566b204420074a85d83cd2c7a74b79e9"
        }
      ],
      "purl": "pkg:npm/sinon-test@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sinon-test/-/sinon-test-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sinon-test@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sinon-test/-/sinon-test-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tui-jsdoc-template",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2ac342186a8b7ce95276a30281a332678a582d6b4679e71f2bf4f7878fbbdbfa30e84af246454414720b39e92661f47136d1fc79e0f7bbe69f385fce7fca02c"
        }
      ],
      "purl": "pkg:npm/tui-jsdoc-template@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tui-jsdoc-template/-/tui-jsdoc-template-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tui-jsdoc-template@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tui-jsdoc-template/-/tui-jsdoc-template-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cheerio",
      "version": "0.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3f33389d33a1bf4e045e964cc31b5df2dd8f4bc418c26fef3238467dfb0c2ae60545db0da9574c261ef8df4f446fbb11b247b504b8adfaafec9831b4f8b8a80"
        }
      ],
      "purl": "pkg:npm/cheerio@0.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio/-/cheerio-0.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio@0.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio/-/cheerio-0.22.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75440e068a9d47b43057dd16cac5cf2d71b92ceee785806089655fc45f340ca3c5f33c75b7fa54776158cbbdde9a0df3ae3b4ce9dce66206c729f576af188740"
        }
      ],
      "purl": "pkg:npm/css-select@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25939203b328f6c34607cf948d283374bb68916024cb5cdbced3375912c26d9ef4ff771300d99098e751ef2da0f89d1ed965f2c32d724b8ebcb58f88aeea84c3"
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6be10fa03fae66235f87ee5fc70da73bd43015aea725ed8eaf7e5f198e88a70d51dd1e001b3d5dd53119ac27a0bf0d984e66748d78ab198973c71a58487c2912"
        }
      ],
      "purl": "pkg:npm/css-what@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf"
        },
        {
          "alg": "SHA-512",
          "content": "812bb93a2fc8fb7c0310d06c39606244ad5ea06c5ccb0612aa0deb47deb4ffe11f634085e045f554f9201ce6775a24bf260d83b65885e8185670795fa5851c1b"
        }
      ],
      "purl": "pkg:npm/domutils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "974214d293f32d648705c89e65ba4e2a09089f7b6cdef021ed9b85c9737027125793f7381b08fdc5a4c9c080d54025dac160f4a9bdc8ccc187e6b82541a3b45c"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "052281f934a9329148fc73b108daf53bc68c39367c853de9337190d30fe65919a48440d2149924cb3cf85d0b01578e010a1c0692b0df3328d50f4780d9a155df"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f62d9318975173bbb61204a83e46844e7a5a4e68dadc1a613d019b9b7837eb08489ae3cde85b8308e15c8577954d1c8810ffbaa6d48d305072b57899e7db2db"
        }
      ],
      "purl": "pkg:npm/entities@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59e04e763bbc4a7ccf379bd3509631614c4b797a426953f98b97b42c5f1f83b58e445d9677bc055ffa64d2d61993bb3c4fe27b54bcb40dae89d7ec024f402d1e"
        }
      ],
      "purl": "pkg:npm/nth-check@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22089e3628d431b903a2fca828e6d4d435219b58b035813f7ee89f1281077ddd6864a64368e3414a46a5ed8d35b21c6c338f51e1768c7467b3dd69c5f547e209"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2622b4e21d07b79bbff347dd2cc084995e3390d87605ca0c141999ffdd56b5867ca955d22a38b0edf5cc8053e71dc49980ea375dd8a71ef9a70d478c7f9478c0"
        }
      ],
      "purl": "pkg:npm/domhandler@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.assignin",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba8df5fb841eb0a3e8044232b0e263a8dc6a28a2"
        }
      ],
      "purl": "pkg:npm/lodash.assignin@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.assignin/-/lodash.assignin-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.assignin@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.assignin/-/lodash.assignin-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.bind",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ae3017e939622ac31b7d7d7dcb1b34db1690d35"
        }
      ],
      "purl": "pkg:npm/lodash.bind@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.bind/-/lodash.bind-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.bind@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.bind/-/lodash.bind-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d09178716ffea4dde9e5fb7b37f6f0802274580c"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.filter",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "668b1d4981603ae1cc5a6fa760143e480b4c4ace"
        }
      ],
      "purl": "pkg:npm/lodash.filter@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.filter/-/lodash.filter-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.filter@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.filter/-/lodash.filter-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.flatten",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f31c22225a9632d2bbf8e4addbef240aa765a61f"
        }
      ],
      "purl": "pkg:npm/lodash.flatten@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.flatten/-/lodash.flatten-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flatten@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.flatten/-/lodash.flatten-4.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.foreach",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a6a35eace401280c7f06dddec35165ab27e3e53"
        }
      ],
      "purl": "pkg:npm/lodash.foreach@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.foreach/-/lodash.foreach-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.foreach@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.foreach/-/lodash.foreach-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.map",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "771ec7839e3473d9c4cde28b19394c3562f4f6d3"
        }
      ],
      "purl": "pkg:npm/lodash.map@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.map/-/lodash.map-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.map@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.map/-/lodash.map-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.merge",
      "version": "4.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0aa63a97455beb6320ac5f5b3047f5d32b4bdae9542440ce8c368ecfa96efb0728c086801103c11facfd4de3e2a52a3f184b46540ad453fd852e872603ba321"
        }
      ],
      "purl": "pkg:npm/lodash.merge@4.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.merge@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.pick",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "52f05610fff9ded422611441ed1fc123a03001b3"
        }
      ],
      "purl": "pkg:npm/lodash.pick@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.pick/-/lodash.pick-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.pick@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.pick/-/lodash.pick-4.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.reduce",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f1ab6b839299ad48f784abbf476596f03b914d3b"
        }
      ],
      "purl": "pkg:npm/lodash.reduce@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.reduce/-/lodash.reduce-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.reduce@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.reduce/-/lodash.reduce-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.reject",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80d6492dc1470864bbf583533b651f42a9f52415"
        }
      ],
      "purl": "pkg:npm/lodash.reject@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.reject/-/lodash.reject-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.reject@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.reject/-/lodash.reject-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.some",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bb9f314ef6b8baded13b549169b2a945eb68e4d"
        }
      ],
      "purl": "pkg:npm/lodash.some@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.some/-/lodash.some-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.some@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.some/-/lodash.some-4.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xo",
      "version": "0.37.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52c0f5424213b288cd266898683836d063ae4c4b87018b72b3a0b3e095566eb6a5ea16c26fe594f24b6df710930ebb2bdab34f8e8c69d68a27a33f4790f6069d"
        }
      ],
      "purl": "pkg:npm/xo@0.37.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xo/-/xo-0.37.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xo@0.37.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xo/-/xo-0.37.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/xo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "xo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "eslint-plugin",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68836203119574e975789c958da5a7fd871502ae068bf628df9a871829ea6d6573eb5837f43d21db7bde63f300d2b14519fc4aed3c92836bb00de36ff89815a6"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/eslint-plugin@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/eslint-plugin@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "parser",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66885db1b5da76318148ad3fafe77ced7d120662b33aae3f4b99f32ba481809b29168f7f0940c9ee18dacaecdef892bb09940b0ccae8ab2b69ee939c14a4f164"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/parser@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/parser@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "eslint",
      "version": "7.32.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54767c817f840dfcfef7b8c6720c860b24626bf74f39de9787dc8fbfc065d7e4a8688c03f9afef96b3a6191532398bbb33052173b0b1a9e683654d774b8f84a4"
        }
      ],
      "purl": "pkg:npm/eslint@7.32.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-7.32.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@7.32.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-7.32.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/eslint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "eslint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.12.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66dd72a1d071d5473289e3cc4a45a753884faa1c2aee11a2da714bd4b780dc4525faad8b431d7a3084a0274fb3edd9e682f3fd42d2257ae11318e88e1f545c23"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.12.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.12.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.12.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.12.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "eslintrc",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27a285173e50098509ab7a5fd268c47022551116f3bfbd4f5080dccee87d264c0613371e77a08ee400cb1c1d6b6dfffea0f06da0f7cc60d3a9183cc200d95b5f"
        }
      ],
      "purl": "pkg:npm/%40eslint/eslintrc@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/eslintrc@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "7.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf724234213ae2e9a41699a4146ab354ab0e4f4b4dd59afeb9ea8b65fa55d4e6fc7be08480f59af8ec42a061f7b6786298c2886819b89bfbda46927f92b473da"
        }
      ],
      "purl": "pkg:npm/espree@7.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-7.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@7.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-7.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "7.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d0ca9d28d7f98d75b4ced4f3ba9079304ab9a0674313fe3082a4d8b06d48c6a11378765061a89b6842e0a710e2b3813570834656882a10cba4b131e6d0561f0"
        }
      ],
      "purl": "pkg:npm/acorn@7.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@7.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aeaf6cf893617f4202863b435f196527b838d68664e52957b69d0b1f0c80e5c7a3c27eef2a62a9e293eb8ba60478fbf63d4eb9b00b1e81b5ed2229e60c50d781"
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e89ef637c50d6b8eb6c1afca14e0edfcf277214eb4483a42dd05c2d478dcd415d7a5f2f60bd479f8053b8e17b417a19112a54c87826ebbe358ef19fee9d8a951"
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "13.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e9cdc3a580384c1b4ef402fd15cb93b0925a6fd48ebe8fde8685423b461ec8cc308a2f36e87e52ebadfa8cbbc36ab836e247810e424ed7cc9c2a549c62731a2"
        }
      ],
      "purl": "pkg:npm/globals@13.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-13.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@13.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-13.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.20.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35ef9e138af4fe25a7a40c43f39db3dc0f8dd01b7944dfff36327045dd95147126af2c317f9bec66587847a962c65e81fb0cfff1dfa669348090dd452242372d"
        }
      ],
      "purl": "pkg:npm/type-fest@0.20.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.20.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7321432aba9cfd875c5859e2261cc8e36f80cd2fa0370994cce485711090630c92b81041cbf2a3bb158b67f147107e8ca2ad4d8b330e056c9372ff0ee0e64832"
        }
      ],
      "purl": "pkg:npm/ignore@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-4.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-fresh",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bde6188506be0f54012b39ef8541f16fc7dac65af0527c6c78301b029e39ec4d302cd8a8d9b3922a78d80e1323f98880abad71acc1a1424f625d593917381033"
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "190d84591a5057cfe8f80c3c62ab5f6593df3515996246e2744f64e6ba65fe10b7bed1c705f1a6d887e2eaa595f9ca031a4ad42990311372e8b7991cb11961fa"
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parent-module/-/parent-module-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3fc06302c5ef652f95203508d7584709012fef8613ebb6148b924914d588a8bdb7e6c0668d7e3eab1f4cbaf96ce62bf234435cb71e3ac502d0dda4ee13bb2c69"
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5bfcc6265ecb40932b11171f2988d235b4614d408140def904dc6ab812e035745ea01e9ffebe066ab021896a9bf2f0ddd0fb8a3b170beab8f25c9d9ed1632e2"
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@humanwhocodes",
      "name": "config-array",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15a82d285cfbe17ad397bcba1c2cd0a700df5cfd328717bd9472c3d546718ef64871bc91cfccd3145ff260d7d27f3538d78783c19d52aced10bedc9ffb014c42"
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/config-array@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/config-array@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@humanwhocodes",
      "name": "object-schema",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66740c9cb5787bb843954bf0f07f94f0048bd36492d869fafbd01cdf01862c87bbfa37b601e00ec4f63e8b320f2437c50dbede0e37afd14b3c30ed6215137c84"
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/object-schema@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/object-schema@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@humanwhocodes/object-schema/-/object-schema-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c92f90e62de105fec6064778286f1aede04d3563462d3684c306165228c860cef3ae56033340455c78e33d6956675460ed469d7597880e68bd8c5dc79aa890db"
        }
      ],
      "purl": "pkg:npm/doctrine@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enquirer",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca33673ebdf5e7f1634b8cc8b14c5882e6143cfd9ed4d2b877b13b64e2e2c9809c6c50624ccc880fedb0be6db0ebea59fe874c03b71192386c3db96dc013ab2e"
        }
      ],
      "purl": "pkg:npm/enquirer@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enquirer/-/enquirer-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enquirer@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enquirer/-/enquirer-2.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8dc706c5fe16742a97a960dd1c35ba3e14de97a0aec6687950860c7f848665e956b46c5e3945038ec212c8cbc9500dbb8289a7522c20671f608562aba2b796f"
        }
      ],
      "purl": "pkg:npm/eslint-scope@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a67ca2f76fa1be457bcff0dd6faf74ead642ffa021609f63585c4b6a3fcfcbde929aa540381bc70555aa05dd2537db7083e17ca947f7df8a81e692d8bafd36a"
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30c74046e54443388d4de243f0380caa6870475d41450fdc04ffa92ed61d4939dfdcc20ef1f15e8883446d7dfa65d3657d4ffb03d7f7814c38f41de842cbf004"
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dfd9e729f7d6cfcc4dd4153fd9cefd9fd9c1f470f3a349e2614ab1eb1caa527ca8027432c96a4e4dd6447a209c87c041bb9d79b78c29f599a055f5619fd101a7"
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-utils",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3de1d418a1abb2be50dce375e7181f2553766def5def342860b78116c215c03f65e406f9dd7f117402022a28e39ab233c83f38fd26a8309306c2603d3f57766"
        }
      ],
      "purl": "pkg:npm/eslint-utils@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-utils/-/eslint-utils-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-utils@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-utils/-/eslint-utils-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2b4a6441cd7803cc8b03ea619d2607afce07b3239df809eaf92ffbf2317d241f34ff8e2078de346177d61494c1982d0cb6ce9acd9a84fca9ab021ad63e41a2b"
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esquery",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7020e2b295ade6f1c7b70318d98ac043889b16400bf116c7e581819d905cf7432896fbdf92441c26ba3f699880414950dea82b612e83eaff067391b9090b1cf7"
        }
      ],
      "purl": "pkg:npm/esquery@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esquery/-/esquery-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esquery/-/esquery-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-entry-cache",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec6a6cfd75b299b2e4d902d82b8373a4c3ab623321748c57b88bf2d9006c2c4ea58eea1d2af7645acfdca72249dc25485691f43a2d47be0d68bdb3332dd14106"
        }
      ],
      "purl": "pkg:npm/file-entry-cache@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat-cache",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "766f6ce4fc3b25cd06bcc61bb2137acdc84203d460425cf31195f7bf2951f48a857d2f177226e551738a7d6e928ae2747b5dde0d8668655e7076b7afecfdcdc2"
        }
      ],
      "purl": "pkg:npm/flat-cache@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat-cache/-/flat-cache-3.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flatted",
      "version": "3.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5885868b62f70f24d4bd4af044a8068bd4f0c5031412a3ce3d00558bbd51f7a8d95c9745b245c499fe7806865a4b59249c6383a0818048613305461dc8c08126"
        }
      ],
      "purl": "pkg:npm/flatted@3.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flatted/-/flatted-3.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@3.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flatted/-/flatted-3.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "functional-red-black-tree",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
        }
      ],
      "purl": "pkg:npm/functional-red-black-tree@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9db7b59496ad3f3cfef30a75142d2d930ad72651"
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9b4f6b87e04e4b184ee1fe7ddebdc4bfb109495c2a48a7aca6f0e589e5e57afbaec3b2a97f2da693eea24102ddabcdfa1aff94011818710e2c7574cb7691029"
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be47033eb459a354192db9f944b18fa60fd698843ae6aa165a170629ffdbe5ea659246ab5f49bdcfca6909ab789a53aa52c5a9c8db9880edd5472ad81d2cd7e6"
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5794a1cf6ec065ea8d6c176944d9026ccc705679f39f10036befc7552be7121c8b15c83fef0b9c50e0469954df4bacead7aa765b2415fbbe69ee0aefd3a87b"
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef84656391429e1ab88d1c5550f283691c2b54d5ccaac1ac896e80270e172bc866b66d74c02d32a5904bc39208a7ce4d64cafdd7ea9dd51bef10dc20ee38d117"
        }
      ],
      "purl": "pkg:npm/optionator@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a083f392c993838fccae289a6063bea245c34fbced9ffc37129b6fffe81221d31d2ac268d2ee027d834524fcbee1228cb82a86c36c319c0f9444c837b7c6bf6d"
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8a5c66883a16a30ca8643e851f19baa7797917"
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "word-wrap",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f3fe6acdc22b4d461fc7500b4cfd54ffe551feca00fa0d5ee660a640b473ab6ecf14ee5bcf4bac5fec424a305d2e5b52890a5d07ef4d60dd91aeb3e9ae139bd"
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf887b4b965e4b767288330d74d08fbcc495d1e605b6430598913ea226f6b46d78ad64a6bf5ccad26dd9a0debd979da89dcfd42e99dd153da32b66517d57db0"
        }
      ],
      "purl": "pkg:npm/progress@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpp",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6ad9b5a8f66543e379dbb6cdb01afd7b5cb88d2f26be1a4959f246832d5d99d3c8030ac1a99ca9fd04531ea6f5ae1c26f256f63b279a39f8156fa106e69492e"
        }
      ],
      "purl": "pkg:npm/regexpp@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpp/-/regexpp-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpp@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpp/-/regexpp-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "table",
      "version": "6.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3f7e2b6b6d5784c872856bb985764b90316947d56830ff211732de710024f8669cd6165b9e840c51b5451028fb9685a2c05a115c571eb0de80bc54a6947cf18"
        }
      ],
      "purl": "pkg:npm/table@6.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/table/-/table-6.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table@6.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/table/-/table-6.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "8.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c06829add0af31a942d01ced5ef8ad0f6842d3861f7c0bedb149fddc96c65d82c0b4250ee31775ee6082650c54388b6207066f252716a3c348bd0310ef5adda6"
        }
      ],
      "purl": "pkg:npm/ajv@8.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.truncate",
      "version": "4.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a350da0b1113b837ecfffd5812cbe58d6eae193"
        }
      ],
      "purl": "pkg:npm/lodash.truncate@4.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.truncate@4.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.truncate/-/lodash.truncate-4.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8c08c7e1634e347151d3e372bd045ca0a986d43c564a1ce83b2bbde6b5358945bf29c8fddfcdfe08c5de52cdd10943a311520fd606738bc60859b4a2aeac435"
        }
      ],
      "purl": "pkg:npm/slice-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "astral-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67bb4cc35cad4d7b798ea31c38ff8e42d794d55b8d2bd634daeb89b4a4354afebd8d740a2a0e5c89b2f0189a30f32cd93fe780735f0498b18f6a5d1ba77eabbd"
        }
      ],
      "purl": "pkg:npm/astral-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/astral-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-compile-cache",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97c9421262dc2d8661e276ee9cd66f40225ce69bfbf910b06bcabf2dd531f2eee5b16bcf0ca9a9a1d24024dc24021242fff745638f0ab881268ed778455883ac"
        }
      ],
      "purl": "pkg:npm/v8-compile-cache@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-compile-cache@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8-compile-cache/-/v8-compile-cache-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "scope-manager",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e487c91e9813b1366e38d29b38372d2f890ab908defdbcc1464c0713c50e6787fcf5979d760f84199b3c3c3f0d70de0b74cdf2807598077ba43c0623be5fea6d"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/scope-manager@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/scope-manager@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "types",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccaa7b0a34332d02265c4a4bb76054c35b6f38c3df3684c07dbf25e757af8586ce104cdd5b240d98759618f47a8702890c08bed555d20669e12fd9325534ceb9"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/types@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/types/-/types-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/types@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/types/-/types-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "visitor-keys",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "baa8bfd9a4b3f60d9fb5c1d67fcb8b3c903bd2b52feb2b8c5b9068870f9bc1cbb36b14081da285642286a065c8adcf6f913277fb4b7133bdcad07ab7779c2022"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/visitor-keys@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/visitor-keys@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "typescript-estree",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae459163530f1738f09c4547b3119e983ceaa9d770d906d32652023c3f69f48f4b7ec3bc7dd99f40f397dee29f51a1910c525b7ebb66fec5e155737813e6f308"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/typescript-estree@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/typescript-estree@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "3.21.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98728ade25172fedd417ac4be64d0f12129150128f042bfff919043a98d15b1c71dbb28a4419a603ad00f6980e52f322f062a144c3c49a30513f3b365bb3b538"
        }
      ],
      "purl": "pkg:npm/tsutils@3.21.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-3.21.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@3.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-3.21.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31a99bd625f614352971347396d3f181630acb77e18344cddfbf3295b92d3c63caffdf4a6c3b4c4385b587082c6cf02c1b76b4c4a6b5be6c3854a6506e4bf3e4"
        }
      ],
      "purl": "pkg:npm/typescript@4.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.7.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/tsc, /app/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126"
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@typescript-eslint",
      "name": "experimental-utils",
      "version": "4.33.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cde4233a8112e491634e7021239418ed9be27333330e9b65b35e4616c23a8f250eab490e7fdf96a27921b652218744601d19ea8f981d3715b98f512f032620e9"
        }
      ],
      "purl": "pkg:npm/%40typescript-eslint/experimental-utils@4.33.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@typescript-eslint/experimental-utils/-/experimental-utils-4.33.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@typescript-eslint/experimental-utils@4.33.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@typescript-eslint/experimental-utils/-/experimental-utils-4.33.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-schema",
      "version": "7.0.11",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ebaf1b548de14b38adecfeb72970c30095d69b223553a425e33701459435683f8c3418dbe1c4ff8e38cb981cfa306646a0123a6d8e7a1e5cd5ac47a1bc1129"
        }
      ],
      "purl": "pkg:npm/%40types/json-schema@7.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-schema@7.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.11.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/json-schema"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-utils",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bae402e3720672dc3af29240d5181b412f3f34feeb721e82c1de23dd906d828e3ff05963e1e184ed96126513778aae69554bfa18f756e59d511657a8f38b8b0c"
        }
      ],
      "purl": "pkg:npm/eslint-utils@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-utils/-/eslint-utils-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-utils@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-utils/-/eslint-utils-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cosmiconfig",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b56163545761f01a2981edd536b35c1432eacd2a3a71eb41f1041eb150cf117bedacd60d4821f26f151d3f88217e5c7744d06313293b8b477d9441f7f84c4c9"
        }
      ],
      "purl": "pkg:npm/cosmiconfig@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "parse-json",
      "version": "4.0.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fffa28ac46632fab1b3dc2946827481a5214787dba9a0ce29a3041efb1ba5d18270e5fcbe703a7a7204645efcc99fe42556dcfc04044d4d8e2319fecb05878c0"
        }
      ],
      "purl": "pkg:npm/%40types/parse-json@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/parse-json/-/parse-json-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/parse-json@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/parse-json/-/parse-json-4.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/parse-json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b208abe6fe98421b13a461148233cda20f072df3f1289d2120092c56c43eef7ba8c7820b059787d955004f44d810a0a8ae57fa1d845ac6cd05d9c1b89f0bc46"
        }
      ],
      "purl": "pkg:npm/parse-json@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        },
        {
          "alg": "SHA-512",
          "content": "cf3d3a4bcb74a33a035cc1beb9b7b6eb37824cd5dc2883c96498bc841ac5e227422e6b38086f50b4aeea065d5ba22e4e0f31698ecc1be493e61c26cca63698ce"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lines-and-columns",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef297295eb1943f3d5dbd8e110397751f8e8e995fb802a89af917b3caaea73ddefedfcd2ca6b75069c0453c9c0517b3cab3cefaa16e384ae50660e8cb7f1e406"
        }
      ],
      "purl": "pkg:npm/lines-and-columns@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lines-and-columns@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yaml",
      "version": "1.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af7bd7c84ad109827bc20dbccaf058e554a8005f19be5716f7f07053312d52c8ef5ff0cab36e1d224bb08edba9af02491ec6f251b2c0a5ea584d1d41378b87ae"
        }
      ],
      "purl": "pkg:npm/yaml@1.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@1.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-prettier",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad5e10bb40b79df24a3ce02116e8c5c41ed130ff94445c90aaa3995bd0cc443ed90d31728da225113537c731c42edfbee2e802d3e266d3ce0741892425ef88be"
        }
      ],
      "purl": "pkg:npm/eslint-config-prettier@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-prettier/-/eslint-config-prettier-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-prettier@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-prettier/-/eslint-config-prettier-7.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/eslint-config-prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "eslint-config-prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-xo",
      "version": "0.34.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95ba4735f5664ab110b07b32438e3063c540e66108e09ae2e43935049507d23882c3a9d3923d7a5507878ae5b320127fb9ffa61761734aa2d57f7b43d5c1e160"
        }
      ],
      "purl": "pkg:npm/eslint-config-xo@0.34.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-xo/-/eslint-config-xo-0.34.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-xo@0.34.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-xo/-/eslint-config-xo-0.34.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "confusing-browser-globals",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80d95dff7972487c2e85a565b8950a2de3d88ab33740d08acd5c6a01d849208f7f5972955f93d447331526ca52d634ec952aa37ae1b828c5534a8ba2b7960f1c"
        }
      ],
      "purl": "pkg:npm/confusing-browser-globals@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/confusing-browser-globals/-/confusing-browser-globals-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/confusing-browser-globals@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/confusing-browser-globals/-/confusing-browser-globals-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-xo-typescript",
      "version": "0.37.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "785463e3132188c13109bf87ff0c970b53b04ca262390f9077d9b2a192d67724745fc3c08edccf45fc523b28767e406766f1420d8d03baa70b90f48349ee186e"
        }
      ],
      "purl": "pkg:npm/eslint-config-xo-typescript@0.37.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-xo-typescript/-/eslint-config-xo-typescript-0.37.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-xo-typescript@0.37.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-xo-typescript/-/eslint-config-xo-typescript-0.37.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-formatter-pretty",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22c513b46c45d61ac7ea531689297559b19a88fd35793ea4cf2c1d63553eccb73430ffa7c049d4892f5423c21a3935214de4092e50845886d720d047e1825b05"
        }
      ],
      "purl": "pkg:npm/eslint-formatter-pretty@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-formatter-pretty/-/eslint-formatter-pretty-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-formatter-pretty@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-formatter-pretty/-/eslint-formatter-pretty-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint",
      "version": "7.29.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54d72f8a86031fcfc5c5a7932a4338fd3893c2dea9055f44dce7c69af6b0f2d3e5d2bac7089e0b975e47453fa93221407ff30b42f0330bee91cd43042fd09e9e"
        }
      ],
      "purl": "pkg:npm/%40types/eslint@7.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint/-/eslint-7.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint@7.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint/-/eslint-7.29.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/eslint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "0.0.51",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ae3e053a7f7793fd780a28fa8a77f80b655d579af7f56b64793ce04e1906babaff36c6996cf3d1d4e7329e568c91f17cc777544634e95096f51edc21648d635"
        }
      ],
      "purl": "pkg:npm/%40types/estree@0.0.51",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/estree/-/estree-0.0.51.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@0.0.51",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/estree/-/estree-0.0.51.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/estree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-rule-docs",
      "version": "1.1.232",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5011fdc026cb532077c1389a3421d41c7b20d9a8bb4a7675ee59d0888d14aedfc3ed84cf85ff523878f998bd22acce194cc875c66b9f0e13c69563895d972380"
        }
      ],
      "purl": "pkg:npm/eslint-rule-docs@1.1.232",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-rule-docs/-/eslint-rule-docs-1.1.232.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-rule-docs@1.1.232",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-rule-docs/-/eslint-rule-docs-1.1.232.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "plur",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1419ec2b620a83170f6f57accd57e00398f01401f24f2ad1af6ff55da50031db95f97f7c57746772384545c2497c1e5fed97bfb16de1ea48433e0f9fd38ab52"
        }
      ],
      "purl": "pkg:npm/plur@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/plur/-/plur-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/plur@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/plur/-/plur-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "irregular-plurals",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31504b2944da9e033711f44f1513a19964102910ecae023cdc9f064b78d7cbe3b062a891dbf6a85a7758439e35ea32c4dee68680b1fb9dc99edd7f72d3d819de"
        }
      ],
      "purl": "pkg:npm/irregular-plurals@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/irregular-plurals/-/irregular-plurals-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/irregular-plurals@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/irregular-plurals/-/irregular-plurals-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-hyperlinks",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eac5c4cd5e7e2398fc066abdfef52984644cfd124d4fd48251124b8f07ce839d61791b60b86583cdc6819600332a141ad0454da4f10acd0b81c19f12f1668279"
        }
      ],
      "purl": "pkg:npm/supports-hyperlinks@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-hyperlinks@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-import-resolver-webpack",
      "version": "0.13.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e87483f28353a013687904312bcf7589a0aee56b0c4a4c936180f35a7d1493e9cb02fcc642f8be4fea42aab19191227a5b81cd36b3f59932b6f8b8627372e46"
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-webpack@0.13.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-import-resolver-webpack/-/eslint-import-resolver-webpack-0.13.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-webpack@0.13.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-import-resolver-webpack/-/eslint-import-resolver-webpack-0.13.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-import",
      "version": "2.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8587e2dc55da33c58f2dfe12d5c8a487faf82319ceeb3ae165b106cf66faeb410945bbb18290d2e60902b988065a0db1c61dab06e22be0fbe1bdeffb737d64a0"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-import@2.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.26.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-includes",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8920d864c3324cf92215ab15a9fb8042758061cbcefd278148218a78fa04b618e9e0b10c4dee2e2dcedbd36e68e23019a47862861f313e8f7d4cd5945969060d"
        }
      ],
      "purl": "pkg:npm/array-includes@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-includes@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-includes/-/array-includes-3.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecef856c28a1ac1e5619b1587ac72dc264ca69eeab3a22339b3d6272b79627ed1a03b2c97eeaa112ca364fd9dca5c16dccc42dcd77f64061ae7962464d8b2aac"
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91666b9d5338d900a2100d888356c6f338e820c3a0c56c1808478d77063a4effdc392786a5ca17e295c77ca53134a56802b9eb12bd9ef6cae7031c4622b692f5"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9772c2b85e8c8033704c32a47581848a1623b79a513db120e3aaed9669d23e551b82607c2ce22b2896d86050526e73da25ec4c2ad88f3bc8667918d1cf64ddf8"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9c90ea8a71f695bed05db1591d3efdd78ef79026c350aa68578118bcba1bd65ae3d8642365cd3f2a0326e55203685dd1dd8cc4f302a7868c0a258bc7fe6f33c"
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-property-descriptors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb60d52d91a88840431d0caa1b8c3dc42b99ede244c0d989456c36558f3839e75bed615c036edf88455ef28510c7d840509e1e92eaeabae7131b0b323b55c675"
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-property-descriptors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.20.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5849b6a0185fa08dac22678ce0e176cc4d95dc161d485f8a9d28bd4a2773e757d01ddefe26e17c5e0723f7fd28f8e59e21e212fcc8ae36796bb90ac97f5e8640"
        }
      ],
      "purl": "pkg:npm/es-abstract@1.20.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.20.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.20.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.20.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4023a5960649b5a528f6689805c2c285351a1cd8c91773d8b35562743ec0c22123d6463129e41372d2c07b300e1f964a447d20d8880f9fa2b0078213f22469bc"
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ecbb0b7165f317ebb3abca5f4b090faea670b4674060a709eda52f3d9b51ff4cb174ccd7f37cb315ffd59affa319b23d1a72912300ed0a175c53e9974b97de7"
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5841a4b1b00892c1cbd2df7301937c130959d62be1e117c5594768d1c5e84cd7a41c54e747a8f9f854f1e644ae254abdfc9fd26b8aeac89cb70ff74c6c60d7d"
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-tostringtag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9058dc48d867946575932a0693b3972926b01f924e6ff2f351ce70f41d3684e4ced1d7c54636c740abe0d5de9c7f71db7949ad53d55b6d5deacd9d937a1f7b59"
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-tostringtag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0bf08f06a2969ef75cc6a200471c8e878bf551410e087a600dad16620a4a0c532ccdcacf71f7e0e6e8704a03c22c3d965b19aaea2b22b33f3bb734f4d6db8686"
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function.prototype.name",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8dee6fc1cd52909c2505fe25bc8d879aebbbfefb6bbb9b952010d6c746d74355c94e50ff8530f94235d9a4d21ff2b06ca8dad6af309103a8902425d45ad6f30"
        }
      ],
      "purl": "pkg:npm/function.prototype.name@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function.prototype.name@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "functions-have-names",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c901517c9322a4fdeedab6c7600c6fe835eb76f9245cac624d31e2ac4d1706df42498d6688911dbeac3f323dfd0577dd67aebd5601508883e0dccd232a9a45"
        }
      ],
      "purl": "pkg:npm/functions-have-names@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/functions-have-names/-/functions-have-names-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functions-have-names@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/functions-have-names/-/functions-have-names-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-symbol-description",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8499d1f562f210899a65b4236092e8949f2ba4cf133f47a343257df529edc11b536ae5bd12d8f857e7d50a8bdbd9a4f0d055daa7fb521c680c27cd34f9bc28f"
        }
      ],
      "purl": "pkg:npm/get-symbol-description@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-symbol-description@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internal-slot",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b40c1d490bfb0fc9997b708a3bf27e5d47b7944b0c2960f8974614f337165500c52e07cbe59d11722f176b553a24b3a5cf2d59c57dbcda55de562e386083ebc"
        }
      ],
      "purl": "pkg:npm/internal-slot@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internal-slot@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab95cfcada85108287906762308ad8d749af2d1be7421e36ffe1a8065156ddbd8b5cb136c71269645766f78c1ed016a85774702721aa839c12edea714efd19bf"
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfe70fc56d10194a7499ca9cb204322d5443a171506d73b005aab217b548808e1358d42c0c7ac1a5442c9519887c0a1859d633b3a525289b41d972694da352a5"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-negative-zero",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76a26f6ab2dac17b056cd0de256ef3033f08b49f5c776f18b9fbae1738741bca4d1e324c9d8d3c0efeec617dae17952940ec2278078e13111801659fbbb65950"
        }
      ],
      "purl": "pkg:npm/is-negative-zero@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-negative-zero@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92f45dc43b31663873517d3b6672f27734b54d4fd32654d41c763860b2fcededfba14038f437e42ea832f958c5a1ca30cb6f5c2af7128aefa422fef6f234d356"
        }
      ],
      "purl": "pkg:npm/is-regex@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-shared-array-buffer",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2a376503bb5ff4cbabaf5f24ad08ecf28408c24a51dc785a0c2895bc5bd114f5cbe273f41db19d24114f771c4cb7214105648887ff7c3e007fd441b3c735d84"
        }
      ],
      "purl": "pkg:npm/is-shared-array-buffer@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-string",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b44d945f38af8deea87cf5bb976ddc8c338c6b4f606fbc6502a1ba8c6e5e8fab8f577d939563f734a3e282d68678736ef5fa2171c458bc889931f38e9ce614b6"
        }
      ],
      "purl": "pkg:npm/is-string@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-string/-/is-string-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-string@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-string/-/is-string-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-weakref",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9cb6cb8b666210d3ebd248c7e856fc857b6f86484be7999d9ecd3ba9d5206c7bdfadc0209e89a97a1048b735cd8a15c7fafaacf61413e78d7b24f3184a49a3d"
        }
      ],
      "purl": "pkg:npm/is-weakref@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakref@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.assign",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b14f62f94c75ec029ca250f60a996fb6107a575dee488b733e7f87be6891401daa396a61515ba27438ee9cfcb53c05ee3bbad0b1d862fcf61c4607a5d298ab9"
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexp.prototype.flags",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e382010e3b7b2523a5af823c1f9647383454424d902ee429cd7c1779a8e318856767ebb9c9041bb7e3f4e40fef9e78599df02f6bf637d7276efe9d289191250"
        }
      ],
      "purl": "pkg:npm/regexp.prototype.flags@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexp.prototype.flags@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trimend",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23b446be68d5e2927b3b791d7fe2d716955f74d3b1b425bfd82f1fea33625b8f8f41c870c64083ce5935ffba7e5a5e1ba85219785e3ba801d72ee1c758a031a2"
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimend@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.trimstart",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c7c75e932421a5b0dd28e9d976a3a9dc594b1d8272d1480db7ad1139a72181c3f98baf7123fd1d8b6aa0ad80ff1534c199b2f3169dff68a193f26366c7bd416"
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unbox-primitive",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb5a4f9420fd879d55a2b7b22740517a275e33730328c2a787af95f4bd3cdf7d62a6ae90f0e1576588aa3fa9ffb5b1f1e2ce48f6e4617327ba06b6e48b39010f"
        }
      ],
      "purl": "pkg:npm/unbox-primitive@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbox-primitive@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-bigints",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b52bc22ad06bf65905d04c7469088ff4df8ea55e338b6aff35e7b95644436daaafdf944b60ccdbc107c5499647d2447e45deb7d36509676a7f6c9084a11dd5a1"
        }
      ],
      "purl": "pkg:npm/has-bigints@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-bigints@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-boxed-primitive",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f065dbf400a2e9a65158d8a6515fa4efcae37ba238ebee5c2483a9a5d2ba08cbd61eb92afb252dfbdaa94d5b5f14418ce060af7388671ead6a993a6127f5536"
        }
      ],
      "purl": "pkg:npm/which-boxed-primitive@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-boxed-primitive@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-bigint",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc1f42aee31a9a3ca6f358b6259dd4327e783ca1ac433b097a8eb1bcddc7249e0202c40d07a891bada764e8efb39f08dba8c6ca6c221cda3e83b5cf20848453a"
        }
      ],
      "purl": "pkg:npm/is-bigint@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-bigint@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-boolean-object",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80361a2872669e3e1a5b1ca3e981f25d5a5d41ac2d54b1d4e5c6fe7b3b4f19ccdfe9c8ee4ddc2f7b964811f817a87e1ee7b027d43d4029ff02677918ad046a60"
        }
      ],
      "purl": "pkg:npm/is-boolean-object@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-boolean-object@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number-object",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "935534211ccb328ed995821fcd1bb6dce87a3222056ac8296fd5fbe9ea9f15902ac07e38508e0a4c1bc16086757522fd6730a14c1f528477cb911e29756e64ad"
        }
      ],
      "purl": "pkg:npm/is-number-object@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number-object@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array.prototype.flat",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d762141241ec0210380d8e6cd053e035721d73c5514aa0fd669efc6b96aef5a6c7fd2381aeca74f3624e5853538e4328ce1f26a9c7622ae68b1a13de633b714b"
        }
      ],
      "purl": "pkg:npm/array.prototype.flat@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.flat@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array.prototype.flat/-/array.prototype.flat-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-shim-unscopables",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "266e863dc09d0b7d1e30b6d9db1f33d96b91c00c2cdf34c104abaeb1f7d8554acd8ff195494019fb128c694a5f34347921bc8d0392c96da79ca1455b994701d7"
        }
      ],
      "purl": "pkg:npm/es-shim-unscopables@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-shim-unscopables@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-shim-unscopables/-/es-shim-unscopables-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 2
          },
          {
            "location": "lib/command.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 12
          },
          {
            "location": "lib/generator-features.js",
            "line": 1
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 1
          },
          {
            "location": "lib/package-manager.js",
            "line": 2
          },
          {
            "location": "lib/resolver.js",
            "line": 6
          },
          {
            "location": "lib/store.js",
            "line": 1
          },
          {
            "location": "lib/util/namespace.js",
            "line": 1
          },
          {
            "location": "lib/util/out-of-order-transform.js",
            "line": 2
          },
          {
            "location": "lib/util/repository.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        },
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df999292ee195cad2f7c2b87103030b79e5d8368cd6a31d9d6876f17ef124abf3612c658e109977ee5aca3ca0477ccd185539b48dd7c68cd028d2768057ef323"
        }
      ],
      "purl": "pkg:npm/doctrine@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-import-resolver-node",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d049f4c34dcd455327f548b29fc6113c32af5a3c425a4b25504846353746c75e51bcf25843e95b3a5aab94d236bc402ce290d82b87ff1cdd936c39a4e533f48b"
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-node@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.2.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0858f3618022e1385f890be2ceb1507af4d35c7b670aa59f7bbc75021804b1c4f3e996cb6dfa0b44b3ee81343206d87a7fc644455512c961c50ffed6bb8b755d"
        }
      ],
      "purl": "pkg:npm/debug@3.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 2
          },
          {
            "location": "lib/command.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 12
          },
          {
            "location": "lib/generator-features.js",
            "line": 1
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 1
          },
          {
            "location": "lib/package-manager.js",
            "line": 2
          },
          {
            "location": "lib/resolver.js",
            "line": 6
          },
          {
            "location": "lib/store.js",
            "line": 1
          },
          {
            "location": "lib/util/namespace.js",
            "line": 1
          },
          {
            "location": "lib/util/out-of-order-transform.js",
            "line": 2
          },
          {
            "location": "lib/util/repository.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-module-utils",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3cf09102ecede50d933dc467b445eae438c774123165f98bddd633d6224313e6edc7f7e1c2df899658f9ea3eb375de089e4fda4138ef90b74ecd6ffe93adeb1"
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-module-utils@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
        }
      ],
      "purl": "pkg:npm/find-up@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "find-up"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5"
        }
      ],
      "purl": "pkg:npm/p-limit@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
        }
      ],
      "purl": "pkg:npm/p-try@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.values",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4146515b48a54373e73e96cdb6074d5753c36c4a8b22248507797e1271ad050ffc4944cb8f53d9c2d40700166d2e0c292594d2661b862ce1a4e7b0ebc7622f62"
        }
      ],
      "purl": "pkg:npm/object.values@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.values/-/object.values-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.values@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.values/-/object.values-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsconfig-paths",
      "version": "3.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f10e15a71522eddd5b93c2dbc9b797e9c3104783901d29632c81c3ce3888a5ca3ca6718559a02405f1fbc545ecc235f6e51179a2f8f70cd5e60778e0205c239"
        }
      ],
      "purl": "pkg:npm/tsconfig-paths@3.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsconfig-paths@3.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsconfig-paths/-/tsconfig-paths-3.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json5",
      "version": "0.0.29",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7512e30961d8838a1a03bedcc4eeb8a0efbb2700b09c8ce464f76bac2ef58d0990b6584ce79ea9c0aa396d4ceabd99dd9156de14b2088bef530b8d09345e6135"
        }
      ],
      "purl": "pkg:npm/%40types/json5@0.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json5@0.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/json5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68a4b85908cf7a7471890b02f7730d7e3c7e9db1783c0758ce677fd49223f07633a9f6eef3a6de4ee3605c3ccf9275a4d27d2e0119727b0668e2cfbe112dfa3b"
        }
      ],
      "purl": "pkg:npm/json5@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/tsconfig-paths/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "5.72.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7571b9cd708bb29411e24ad9551e9081a8e764e8d6d8afdd8c7bdd71168342fb2357dcfdbda5bafa36b97593986ea0418c5ea419791aff6672c4d75cfbc26e9e"
        }
      ],
      "purl": "pkg:npm/webpack@5.72.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-5.72.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@5.72.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-5.72.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/webpack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "webpack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "eslint-scope",
      "version": "3.7.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c1de5772adc9c089c4f7e5358fb3921cc0a0fc4b7df71cc69ad9556fe3ec1dbde6c99235ae5bfc444a807c23045ca20f0761561a99bd60fd1df542fe41c74de"
        }
      ],
      "purl": "pkg:npm/%40types/eslint-scope@3.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/eslint-scope@3.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/eslint-scope/-/eslint-scope-3.7.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/eslint-scope"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ast",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba4061d78a852e3c5340d4d7a1c77292c37941d336f12d42c47b76addb241722fec4557b56b7a6b812d56e609e3e3f9445a957044371ffd2e6ee59e18a1b424b"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ast@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ast@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ast/-/ast-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-numbers",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc391bc6207ccdf9cf74d2bd45a8dc7b2e42d30f9026e804825374a1ffa498ef25ee50dbefb02794a61017b69aad9b82aeffa5d14bea2feebc8120ebde4f4b3d"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-numbers@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-numbers@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-numbers/-/helper-numbers-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "floating-point-hex-parser",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88645fc9ce41abe36736e5fc6f987006b463cdfd2872b24f23a1961687411739859f2beb43cdd21ca8668a5094ffc26febb8b818964132113396dc7370d6a0b5"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/floating-point-hex-parser/-/floating-point-hex-parser-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-api-error",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "465852f020425df45447f730a36868f5b9217925c6d3e370a285dc7373c020b00b7f640b745ca3eca1ac2916d573de61667867111a27e245bf0f7499a69e9372"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-api-error/-/helper-api-error-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "long",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e1ea058d4f07f0fcc54eacfed84180e02200fec73980d0df6f8115920b27c8af9149001d09d67e7e9684befd3b08f5aa6527a0dfd83e192d748a2e722a6401"
        }
      ],
      "purl": "pkg:npm/%40xtuc/long@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/long@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/long/-/long-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-bytecode",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3efa68386889c17793ad27ffa9fb9d261c25bc34311607a56ccaadab9d965a25c2e97820d484447678263cdddbb384683bcdcf9cbfe716bc6e7178f5f815fad9"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-bytecode/-/helper-wasm-bytecode-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-edit",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83e46cba9502d5a4c77d1f020e09ec551559149a9d9051e9b0731f26e590cd6537b6f9cb0b4ed4a872027cffb85f22f6b67af56a6be5d52769d3a4e760299590"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-edit@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-edit/-/wasm-edit-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-buffer",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8308a417ae5a0cd79e5daf09c576b604093e4448d2ca1acd0bd670753d1ff2373875041e0d0ec6e26d1fd9008b3c988c4d33bac1f0e64668ffa56d0fb14bc870"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-buffer/-/helper-buffer-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "helper-wasm-section",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d743fd368dbdad85f58fb1771153d7dc9bc63d03da7be0289ae4933e217d78141e0a11c8ea2aa3308c11f4998e257c299e7fe85460e4ec8e4896c92e33053fa6"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/helper-wasm-section/-/helper-wasm-section-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-gen",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17b42a297c30365326b2e963ebe3bbaf89a6b4094259f3bfd077603b14a49597d0703bb44e92e20f5991b7fcc5db9064e7d1488c4b86008ca7e5e8b8c8c7cb84"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-gen/-/wasm-gen-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ieee754",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "849f3b4083ed00c29b16ae821939196098af1306436d052061ddea29269d4cd3a1558ee9fa07cfe92af494b4554da1b5263163fabdd8721a2a458c4d1f733419"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ieee754@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ieee754@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/ieee754/-/ieee754-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xtuc",
      "name": "ieee754",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7f272a0a9c1b0b1cd1e252a98b799703f80c7e459479e6b96581472ed7d0d71a191d19b6ec9e11280cc1361512dc66b0d198faa8ade10613fcc2184ce4cf78"
        }
      ],
      "purl": "pkg:npm/%40xtuc/ieee754@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xtuc/ieee754/-/ieee754-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "leb128",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "049d8fd21359d2ef938756195c9a735ba9a2c2a41419c2074f51bfb1fef680b543f4367901d613a8f35b1d987a2b53395662af157c064966400f3faa056c5e47"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/leb128@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/leb128@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/leb128/-/leb128-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "utf8",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f64a9cc4011d3218b04241e990d8a8ad9ceaa46ae8750436206ac71f10b2f8ece7834a1fc8c034953aa22e456cd6ecd345e8d7fbf3b410e4fb2b1a953ee5e8b1"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/utf8@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/utf8@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/utf8/-/utf8-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-opt",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56a9e436a9d9954e4407ae29a7597b85d9b7866430ed582a6b4285fca08d3bdb08a48e8593a6eb0c4897fa208e62bbccb81583c2cd0d9133b16046fce574071f"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-opt@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-opt/-/wasm-opt-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "wasm-parser",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aeb06e8f0f9d26edf681807bfcbba9e9485d90fc7d4bd4a7a1b6734552fb55c047f41b7d6c204b12e5ff61738eb41b0e678350ad1ca42a17df4561ef8a042f38"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wasm-parser/-/wasm-parser-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@webassemblyjs",
      "name": "wast-printer",
      "version": "1.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2106e851633878acd65be37f8e28f6b116ad28c87df5011e968dc46f6ab4a9792f3d1212023f10c6d9b0e62b70a8af934e406e508138e40c583d3a2a3ed2f982"
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wast-printer@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@webassemblyjs/wast-printer/-/wast-printer-1.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f1e78b8b250675f652b28055ce5acb1c2946ec0595b408fca43e155076121e230adb3e6273a9e0120c89dcf272819e9fc94fa8a04ecf36a8f5f3d3af47f08fc"
        }
      ],
      "purl": "pkg:npm/acorn@8.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/webpack/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/terser/node_modules/.bin/acorn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-import-assertions",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bb559de3c33e1e2ba03856db7c130d7f98d6cfdb8bb41617727c0edf4af9c947a2cc75f3989e6b88aeb24082b61f609d7417fa2d6874edaedaed98774c37313"
        }
      ],
      "purl": "pkg:npm/acorn-import-assertions@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-import-assertions/-/acorn-import-assertions-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-import-assertions@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-import-assertions/-/acorn-import-assertions-1.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chrome-trace-event",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a772942f2420e12ecd2078b17706c65fe9c51e4a01880e18426c96b636fc5e7812295d76e27266472b2001eba36d455bd79be1f91bc551f08fa94eeb5e4fa166"
        }
      ],
      "purl": "pkg:npm/chrome-trace-event@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chrome-trace-event@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chrome-trace-event/-/chrome-trace-event-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "5.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06af554a8afe923bd6ddff7f322891e1e1375d880e97bfeb4bc9674b16d16c5de44b4076afe63dc3992b056c59803c4049565b758ae7e704f88ff59bd09f6aa3"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@5.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@5.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18dcd0bd04ce20fe91c937c4d90c5bf19565366c349fcf2fa75b33c1646298fd369a74ecc775ad9f9a9176a63dc365ddb8535482f3b084d9d0b23c02a7e92a69"
        }
      ],
      "purl": "pkg:npm/tapable@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-module-lexer",
      "version": "0.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d47436336b0fb71c27bcebd3d590a51f24038a081d3635115a9636c1ee9a30a0908945714e656cd9460f2c8ac3f38b12fa431d5307c14b295b24fc0d9c1ae71d"
        }
      ],
      "purl": "pkg:npm/es-module-lexer@0.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-module-lexer@0.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-to-regexp",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9645f51c95f0c8c729af0ff961465cdacec3ae90221c1db5fd5f84d6b1d4ad5368924bc1e9ba8ccd3d157d5ebff3a64d69bb75935e18388693ee70ef397dc88b"
        }
      ],
      "purl": "pkg:npm/glob-to-regexp@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-to-regexp@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-runner",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd1ff533ec92de3e68bbcd0c7b9f63ec5f4832ce0f5ecdd5a91ae6d1353701b28fc659a9a18d5336c70957fa06257a3ca826ad1464df0db63a5ba8a918e6177e"
        }
      ],
      "purl": "pkg:npm/loader-runner@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-runner/-/loader-runner-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb"
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6393d0c52e084e50be11a84bb97698f3a4d77d1ec3739970dbde1a9573aaf3a2401c28a100865faaff273425af68426f682e75b8df616cb19e57470505d1fe17"
        }
      ],
      "purl": "pkg:npm/schema-utils@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e69e964cdd03753195424e958dc123bb5f4881a1ee75a95c7da6c3ef284319e03a6dc42798bf82a6f78b26aff786f7f07756a87fa2f7f3a3ae824c7a45fc8c21"
        }
      ],
      "purl": "pkg:npm/ajv-keywords@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-3.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser-webpack-plugin",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1af959753eb03d029b0cd5bf18343364583f8f8bca53deb2976aba99c524cca3a05b88307f567c7194e8502af3df55c794f587f0c55bd6bdad16d743b53189ee"
        }
      ],
      "purl": "pkg:npm/terser-webpack-plugin@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser-webpack-plugin@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser-webpack-plugin/-/terser-webpack-plugin-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-worker",
      "version": "27.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eefba1f3957971d0e87cfcb19f9f27acf8c192d668d2ef71d60f16b6342897e8d90da13e7e137e708bd38f5d469dd067327c9fad4386d6c650c427632a1f832a"
        }
      ],
      "purl": "pkg:npm/jest-worker@27.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-worker@27.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-worker/-/jest-worker-27.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "terser",
      "version": "5.14.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0bd2b19e33f58540251dd32d90ad6c589eaeed7d2b8a062a938d13d6ad1801e3a583fe48b01f017c4f6df3efc1fa43a9060aeb8770f07e2942c745dc6f54640"
        }
      ],
      "purl": "pkg:npm/terser@5.14.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-5.14.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@5.14.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-5.14.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/terser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "terser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "source-map",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bb3bda36b91f24d8e6c3cac658cdd7e16f4f15b849a5e685868a8b1ad5575a3d9fc0e90c8f90026ec0dd10d658542ce7fa07b32d4261c4352ef8de15ad0ab83"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/source-map@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a1eb9c4a400cc8ea205c173c2fdbc29559298291d4415a83a1f9b610196dfee8e66f6db3774ea306a3986a631427891707f45d95648a090a6e296b704f0cafc"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "commander"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/command.js",
            "line": 2
          },
          {
            "location": "lib/util/command.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b811d4dcbddccec232617297f3c7ddac6a2fc5d482a13183459e92617b524712d95331e0e4fffae87b7aba85251eef4466877e8a75e12a8dea420c17513ff2d7"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13e5d0091c126da6a20a1b6fea4e83c2073e6f1f81b3abee2891c7979928c7f05a29b8625f3a903b02b870edb6c84946a763829a3c15853dc79b18323c69c97d"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74b7426ec9d228f2a08d72d743ae7d4ecc7fea0f3936fab742382dd8cee999e367e232a990ed3df142eaf291832161f1da3c74e9e19c40c7635f528d4ae9068"
        }
      ],
      "purl": "pkg:npm/watchpack@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc3c8c10eac380b28a206d1f9afb73fb87545ffdc6868cf0826ea23e9f0a461be7f9e41ff7e43b196c5534c937fae08f59f757602e04c4605c9085dd1447c7d7"
        }
      ],
      "purl": "pkg:npm/webpack-sources@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-3.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-find",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90efef54269c5bd9a7a67dd63d66d356512739a6cad8becb5a2d87562511b42338eb2d736fa23c50c8f1e0b81b8aa69d4e01e72c89d4ae89f09f76a6a4d4c9b5"
        }
      ],
      "purl": "pkg:npm/array-find@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-find/-/array-find-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-find@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-find/-/array-find-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d6e689b3725f86090927ccc86cd9f1635b89e2e"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memory-fs",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f2bb25368bc121e391c2520de92969caee0a0290"
        }
      ],
      "purl": "pkg:npm/memory-fs@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "0.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29c35707c2b70e50d07482b5d202e8ed446dafd4"
        }
      ],
      "purl": "pkg:npm/tapable@0.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-0.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@0.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-0.1.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-root",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34a7d6e9b79ce867ca734486c757b4ed0658f4f13df6ed017edff4af3483e64dec3bfbf09155290d42959b91a9a7951edd87d284f1535f6d3bd2d0ece6407d36"
        }
      ],
      "purl": "pkg:npm/find-root@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-root/-/find-root-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-root@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-root/-/find-root-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a013841f0762e4a7db880a7ec102aa2c730e1264ff644c4da1c62148de304f99725f76a89a8536d4b8a1ac3283761ada8bf40c61622a00715be0b1bd47bd16c"
        }
      ],
      "purl": "pkg:npm/interpret@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1ab9a0dffcf65d560acb4cd60746da576b589188a71a79b88a435049769425587da50af7b141d5f9e6c9cf1722bb433a6e76a6c2234a9715f39ab0777234319"
        }
      ],
      "purl": "pkg:npm/semver@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/eslint-import-resolver-webpack/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/read-pkg/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/composability.js",
            "line": 2
          },
          {
            "location": "lib/environment.js",
            "line": 15
          },
          {
            "location": "lib/namespace-composability.js",
            "line": 4
          },
          {
            "location": "lib/util/repository.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-ava",
      "version": "11.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50c19e75f97f8082b1d6dce31ad02c4d2260a30c801195365569a9a165d872eb95e01d87e02bbdd32b8c80c3c456dd66425219db52fb60cd824a91d4149a3f2d"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-ava@11.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-ava/-/eslint-plugin-ava-11.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-ava@11.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-ava/-/eslint-plugin-ava-11.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-strict-equal",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddd6925b2bd9ff3c09bee3069731b53be3b0d1849a7467dbde3b21f71a02badbf6b56c81f5d03862f47d2fdfdf49d0d96b6741c9841ef93a9aa52194ae39e4a0"
        }
      ],
      "purl": "pkg:npm/deep-strict-equal@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-strict-equal/-/deep-strict-equal-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-strict-equal@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-strict-equal/-/deep-strict-equal-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-assert",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "206f7ba928483fe9eb2425cc0a090d6601fb8d94389fc4693f23de5d7fbe4fa6af47f2a12e180b8872a8127e517352a37f27127c0f4331aea6fb80b87a0b8787"
        }
      ],
      "purl": "pkg:npm/core-assert@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-assert/-/core-assert-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-assert@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-assert/-/core-assert-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buf-compare",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06fc78c47d34ab079ea46738df116f32ce412804974db1da1e6ebe9036082bda7fe221708c04d09263ca1d04a0259cca6c0ca6873b516d751fd4daa1ce5ef7fd"
        }
      ],
      "purl": "pkg:npm/buf-compare@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buf-compare/-/buf-compare-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buf-compare@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buf-compare/-/buf-compare-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-error",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20e42ab6cfda1d66e28ac6390ee3c943481c6ef68b1426bb7c16bdc682dfc4166f43e648fd987dc6823b1a4f86eb837415d2b801b89bcad1e1b76b568292562e"
        }
      ],
      "purl": "pkg:npm/is-error@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-error/-/is-error-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-error@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-error/-/is-error-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhance-visitors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa945d05da465672a1ebd38fee2ed3da8518e95a"
        }
      ],
      "purl": "pkg:npm/enhance-visitors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhance-visitors/-/enhance-visitors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhance-visitors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhance-visitors/-/enhance-visitors-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espurify",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cedb56be7921703c863a1487e2f3b6a820482e974232ffcc5fc969e1caa04644280d118ada86718b619f5a194fd9d2179a4ec168a78e4eecdb1e1c82ebca3c5d"
        }
      ],
      "purl": "pkg:npm/espurify@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espurify/-/espurify-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espurify@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espurify/-/espurify-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-modules",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0711672791b1a9a2f1fdc889e88acc5a4a8220f41adbba5f89bb72aa7b652c603501243fe24234a0123d333dc4c33ca7cfa767ece7196fd62f894b27bf9b5fc"
        }
      ],
      "purl": "pkg:npm/import-modules@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-modules/-/import-modules-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-modules@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-modules/-/import-modules-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micro-spelling-correcter",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "964277463fe6b6395170793a63209bbd98725933b3741bd31ecc4c9994a4e63c4dd58c95490f891130289b9e667737dcc83ad8ff8f59ed4096efad012b7d1cae"
        }
      ],
      "purl": "pkg:npm/micro-spelling-correcter@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micro-spelling-correcter/-/micro-spelling-correcter-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micro-spelling-correcter@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micro-spelling-correcter/-/micro-spelling-correcter-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-eslint-comments",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2390e97485fa232071e610782635daafe1f9a1ef7d3435da40f4516917bcdaa0bbc1fd079738634b228f3aa00bde245adf075a74e640bc86910c1ccf03c1655"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-eslint-comments@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-eslint-comments/-/eslint-plugin-eslint-comments-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-eslint-comments@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-eslint-comments/-/eslint-plugin-eslint-comments-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-no-use-extend-native",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "741363b3c868afcac981e5cb1f81d3bade5e0f744659ff4952c69d21fb8bed4a2c550fdd9ef38ac3111c46b5eb171acc67c965515593fa13a29b124006c014cd"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-no-use-extend-native@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-no-use-extend-native/-/eslint-plugin-no-use-extend-native-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-no-use-extend-native@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-no-use-extend-native/-/eslint-plugin-no-use-extend-native-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "is-get-set-prop",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2731877e4d78a6a69edcce6bb9d68b0779e76312"
        }
      ],
      "purl": "pkg:npm/is-get-set-prop@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-get-set-prop/-/is-get-set-prop-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-get-set-prop@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-get-set-prop/-/is-get-set-prop-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-set-props",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "998475c178445686d0b32246da5df8dbcfbe8ea3"
        }
      ],
      "purl": "pkg:npm/get-set-props@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-set-props/-/get-set-props-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-set-props@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-set-props/-/get-set-props-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b62e3eb5b570e754514e8bc55976cf92a108ed402ddd82890a7431b69939b5b71e26e743541c1399481c10407cb2d15d760342531b889c7d9407fb13f287c54"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-js-type",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73617006d659b4eb4729bba747d28782df0f7e22"
        }
      ],
      "purl": "pkg:npm/is-js-type@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-js-type/-/is-js-type-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-js-type@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-js-type/-/is-js-type-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-types",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d242e6494ed572ad3c92809fc8bed7f7687cbf03"
        }
      ],
      "purl": "pkg:npm/js-types@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-types/-/js-types-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-types@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-types/-/js-types-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj-prop",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b34de79c450b8d7c73ab2cdf67dc875adb85f80e"
        }
      ],
      "purl": "pkg:npm/is-obj-prop@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj-prop/-/is-obj-prop-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj-prop@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj-prop/-/is-obj-prop-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "obj-props",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7ba7fee5b733c3881b3a0eac4eac86ed45dc31c554418f944eba478d6fd46003e7dac21af3e67da1a4dcfc0c399847ffedbe22528fb9d49e5a691a638d92389"
        }
      ],
      "purl": "pkg:npm/obj-props@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/obj-props/-/obj-props-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/obj-props@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/obj-props/-/obj-props-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-proto-prop",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e5dcd6d0fdf18bbf92616a7e2e5fe19ef688677a6ab26e5595542a40bed4d0ccd16f576c6126af9eb279086d843d1759c84d7a0b7c30d02e9ecb070ff3ce772"
        }
      ],
      "purl": "pkg:npm/is-proto-prop@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-proto-prop/-/is-proto-prop-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-proto-prop@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-proto-prop/-/is-proto-prop-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proto-props",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db299adada20f55691658da69f75aae75ba2496e0d70f613d5c41d05a830cabce7ae294a499c08674506dd93cbfe6c7e6b1127b34844df94f9b9f39865712705"
        }
      ],
      "purl": "pkg:npm/proto-props@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proto-props/-/proto-props-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proto-props@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proto-props/-/proto-props-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-node",
      "version": "11.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a14c2d3c9d56d12283d13afec2abbdd9ce71b82790a81de14821dab27fd982315d03d88318d90d7f6662f73b58ed7fa136e3226f6dcb346466ebeb8df8a2c4de"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-node@11.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-node/-/eslint-plugin-node-11.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-node@11.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-node/-/eslint-plugin-node-11.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-es",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "194980b0968de0573b19bb65f2e38195aca8d83aa1c16bc4cf290c1d20991d4dd7749f8d4b3cd97158578775715f989ca90fa841d2046b05d7f31911de620599"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-es@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-es/-/eslint-plugin-es-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-es@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-es/-/eslint-plugin-es-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-prettier",
      "version": "3.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86d836e4451851e2212875e33a29cae01802703c2d2c78ea6b1083b0ccb99db9d4324285bc884c542a7ee461545d0e0dafc941b0faad180a817a76e916a000da"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-prettier@3.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-3.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-prettier@3.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-3.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier-linter-helpers",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19b2b670ff67ada492505f4dd97c14c2a7f394016530d61897e4a113f57e1fc6bdb8d97fa14a81d70d842f9e098743a5c9149df117d6609ddca154b84d138fdb"
        }
      ],
      "purl": "pkg:npm/prettier-linter-helpers@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier-linter-helpers/-/prettier-linter-helpers-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier-linter-helpers@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier-linter-helpers/-/prettier-linter-helpers-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-diff",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c49ba84f9f8bf7d5e567cb7079d6917fa031d93810571be064e6283caa99b9f98989bd2d2f6b5e80f04e65bd6954d808865a83940d1e3b4737c01bd0726cf1e3"
        }
      ],
      "purl": "pkg:npm/fast-diff@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-diff@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-promise",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d8dac1aaca9b731410cb87f18c6c0c5f7490be6f47f6dcc13adc5384e3e25aa34a19dc4d4b13016d5895ffd6918c24b893b6b4927ab9f609133f83e75f73479"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-promise@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-promise/-/eslint-plugin-promise-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-promise@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-promise/-/eslint-plugin-promise-4.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-unicorn",
      "version": "25.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "304c845a8ca8bbfaa1247eab10447d607002b42b104fe79ec1ce857716e2d9e893bec1ab051f0964c03aa9a7a87f7a0c41e4713a968446804acd4ed1e5ce00ff"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-unicorn@25.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-unicorn/-/eslint-plugin-unicorn-25.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-unicorn@25.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-unicorn/-/eslint-plugin-unicorn-25.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ci-info",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6d2bb12dad9d0df8e2c532d86da8e8f87c8d8979bf3c0b808064fbb6e4b0d55205c9d00dc9b383cc1aaae7d095355b4321d7f67cc19cd83f1a94ad77816e809"
        }
      ],
      "purl": "pkg:npm/ci-info@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ci-info/-/ci-info-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ci-info/-/ci-info-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-regexp",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19f8ac119109bf32ab9865a4bdf860cdccff06594dd5449ea83d95ead835e0e00e81a083d99fcf504bb19c067f9cfbe6687446edaf32efba754ff2114380f51f"
        }
      ],
      "purl": "pkg:npm/clean-regexp@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-regexp/-/clean-regexp-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-regexp@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-regexp/-/clean-regexp-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-ast-utils",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2dcf34e29b6ff5fa556b947d7d11f410244855252bb4cce6fdca06f789aa4de94972683b7246ae1be54d45b96d2fd6545af45a7f189c87912c26e8da8006008"
        }
      ],
      "purl": "pkg:npm/eslint-ast-utils@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-ast-utils/-/eslint-ast-utils-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-ast-utils@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-ast-utils/-/eslint-ast-utils-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.zip",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec6662e4896408ed4ab6c542a3990b72cc080020"
        }
      ],
      "purl": "pkg:npm/lodash.zip@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.zip/-/lodash.zip-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.zip@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.zip/-/lodash.zip-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-template-visitor",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df2761a85a6e57bc7533d10ae7604f363e95d0ac2ed0a2a470801fa548701db47ca1c4659ffa141e07f142ea58f0ed61e10bff3ce1c3ba66ff070c0d7f16ed9c"
        }
      ],
      "purl": "pkg:npm/eslint-template-visitor@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-template-visitor/-/eslint-template-visitor-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-template-visitor@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-template-visitor/-/eslint-template-visitor-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "eslint-parser",
      "version": "7.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a05418904f12b87d78fae479d4954099dab02985c6463117c7bb3e5a26a0563a90f873c4fa79f0c85daa9551bc7af52c50798f700fba6173040db22113241ce4"
        }
      ],
      "purl": "pkg:npm/%40babel/eslint-parser@7.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/eslint-parser/-/eslint-parser-7.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/eslint-parser@7.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/eslint-parser/-/eslint-parser-7.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "multimap",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19211f4f6ac3f1197991b0417c8ec0f39ddcc70e3eed21abfe2549af20507f587b30962167aaec44093fc37bb191e3283df64cbf36544a253f361b5cb6ef56f"
        }
      ],
      "purl": "pkg:npm/multimap@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multimap/-/multimap-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multimap@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multimap/-/multimap-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pluralize",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35cdc84f9c87cdf9537db8e0a967023e9a3b0da2b2e059e907497fcc2016d1373b8f1022baa4b11dab27b41dc3efcf3b2d2ac0f7790327d217a2fc49631c8b08"
        }
      ],
      "purl": "pkg:npm/pluralize@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pluralize/-/pluralize-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pluralize@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pluralize/-/pluralize-8.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccad1307b5dde89a422e694b9ae7eaca4184fbf4e539e3c3eaa28294d5bb8470ca161fc9effee0096191ee3a044045b56caab76b7c9465239b3a858b150e2886"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-7.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "520ebd98d3a97ef28301cd90f034693238f376dae7bfd1dc48c5fee15b19c43d5a67a673ac813bae5cd706d593ca150b48c2a0d3be805ba591e626690f42623a"
        }
      ],
      "purl": "pkg:npm/read-pkg@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "normalize-package-data",
      "version": "2.4.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a3edc23bcfef7c336f364ea9a9d8ae4422ca28b941336c1261410cc31378d221193aafd82ccf4a14a24a88511e2ed51ddd307a34a431cceec34e1f286e972a7"
        }
      ],
      "purl": "pkg:npm/%40types/normalize-package-data@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/normalize-package-data/-/normalize-package-data-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/normalize-package-data@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/normalize-package-data/-/normalize-package-data-2.4.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/normalize-package-data"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.8.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b120301bf4bb26e83a0e27bc47fb9f97e32d4b53fe078b9d0bf42e6c22cc0adc9cd42d2e1bc24d45be374182f611e1bcd3e2db944220b5e451367f91db2ef63"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.8.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70e61c516c210ae1c25e2e3d4611510b22442b788f8f5662cfd0e9562577b5b64ec170f8f50cc837732938b24dc61daac2ada524965a28c570f6a362e234c2d3"
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ad97606b1623345f7300358823dc29328318519abf668bac617a36dd3bdeb49c5e840c90294d8a67d014270ca96734150b2a208dd67df0f440641caf195a0fa"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abe301f27611d4a0cbae0af81b9c9e99fb69302eff40ba959dd06610476ace6363e5d70538ee0ea3caa5c1913750b4f7f998a6d45f0aab87019e290d86508c96"
        }
      ],
      "purl": "pkg:npm/type-fest@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexp-tree",
      "version": "0.1.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3668456e2e1be75495bab3f88f80418ae91fbfc6781dda3350fb1cb86d73432b164a247ea3a4f1d8ea455e56fd4878b08782cc118fe2a5dc42da0e31ba5758b"
        }
      ],
      "purl": "pkg:npm/regexp-tree@0.1.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexp-tree/-/regexp-tree-0.1.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexp-tree@0.1.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexp-tree/-/regexp-tree-0.1.24.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/regexp-tree"
        },
        {
          "name": "cdx:npm:bin",
          "value": "regexp-tree"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reserved-words",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00a0940f98cd501aeaaac316411d9adc52b31ab1"
        }
      ],
      "purl": "pkg:npm/reserved-words@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reserved-words/-/reserved-words-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reserved-words@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reserved-words/-/reserved-words-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af1fb1f0033329be50e6543de59a22e996c9ab008b92a8b75ee257a793f7ad3f0e11ceac642246e40139754de5b2046bfc5e01b37d634a554dfa3e4aaec1aef4"
        }
      ],
      "purl": "pkg:npm/safe-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-regex/-/safe-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-regex/-/safe-regex-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "9.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8376667a94b7d3fec1485a91be8a370ce310bbb223ab13b99c20edfb333d5d68dbdf75a0ef388d4fe42fa9bb9cdfe816a733b4d89b9b5729361b866fa3539"
        }
      ],
      "purl": "pkg:npm/fs-extra@9.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@9.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "at-least-node",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faafedec492fd440d8da5e8675ae8b2e25f5e2b53d4d5db459ade87de426c0f1596ce328f435eb2db3a315a69c9645ca5a27486a8a7000e6d00eac16b46523aa"
        }
      ],
      "purl": "pkg:npm/at-least-node@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/at-least-node@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b18db6680eb1721033a6b8f2aa648442fe146c003344dd0bd9d401d0d94de5a7134caf43a27ea78687377806d49e966208034031f77ffb8d2455d29f17282886"
        }
      ],
      "purl": "pkg:npm/get-stdin@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-8.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "9.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2594f1d139ae667310c493083a6cfb7741b11fe290d048db5de893cbd58bcebc0a3feffd15026f5371c51ea1399aae33f0e297d4b61482a9cc9f341d48dd94a"
        }
      ],
      "purl": "pkg:npm/globby@9.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-9.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@9.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-9.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "globby"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/resolver.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "glob",
      "version": "7.2.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "654c5bcca97421f2482d34bab7b8a9e5f41033f2774c962e6c39b79cc6e0b9b34d612eb6797794a682d40bcffb7c93621581d3ac63d09fb86ca435332075f750"
        }
      ],
      "purl": "pkg:npm/%40types/glob@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/glob/-/glob-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/glob@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/glob/-/glob-7.2.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f1afa4098ff45d53f8426818ce7f15beaba972b9513a245588ac0529b8e3a1a0926843df5c527de2811687541e4ff56ae015537415f02b337c7472e78e53c9e"
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30d85ae01590e896f0845863d3760ae79d9fedc6f7033a04f12cde96380286f2f5765dc872f8205d5cf50e2973c926640a36be097b996dd5bbc804dc8569fcfd"
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dir-glob",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fd2c18b9416cc85b723a7bffeec59a0b06552df64729ebaaa8d2c482c4be9864a73be51d5ce0c142a1efcb6998811a682e8ef41dc5ce419f74217f2bcae47b3"
        }
      ],
      "purl": "pkg:npm/dir-glob@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dir-glob/-/dir-glob-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dir-glob@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dir-glob/-/dir-glob-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f6654b1d6451e0037bb87b93df3db8ddec70c3a713e741be633744ab0ec8cd4ae5571c9aadc139d6a86d01d6366b82627fee58f51265480725add60c46916be"
        }
      ],
      "purl": "pkg:npm/path-type@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-glob",
      "version": "2.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8352ae4301ce64098e64cb81b477710ed8eef93d914fc8e0082f5a00db1ba5d8830d34a78e07ee56c20134a6d4789237a0a31113171f343b499783a16df7ccb3"
        }
      ],
      "purl": "pkg:npm/fast-glob@2.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-2.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-glob@2.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-glob/-/fast-glob-2.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@mrmlnc",
      "name": "readdir-enhanced",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6cf1e9e898bc6f8d6ccd339c68feb75659db6cee4dcba7700004ed63a2538e1e4dd8e2eb6f9424fd38797119114219160adf8426c62b341d0c88bf86a67e9ede"
        }
      ],
      "purl": "pkg:npm/%40mrmlnc/readdir-enhanced@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@mrmlnc/readdir-enhanced/-/readdir-enhanced-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@mrmlnc/readdir-enhanced@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@mrmlnc/readdir-enhanced/-/readdir-enhanced-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-me-maybe",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c02c85b0342428fc3017c043c0e896371ffd2b8e4bfe1be08108836ef7bebe230d3109d686b95822e064d3da1f7dfc0246d08ef4fe97c14b6db9fcd4d7558257"
        }
      ],
      "purl": "pkg:npm/call-me-maybe@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-me-maybe/-/call-me-maybe-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-me-maybe@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-me-maybe/-/call-me-maybe-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-to-regexp",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c5a1494d2066c570cc3bfe4496175acc4d502ab"
        }
      ],
      "purl": "pkg:npm/glob-to-regexp@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-to-regexp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b210260f26900b81fdd803c5a086950c70b1e5b4ad228720bdbc10cb13d1adb518db45751184db48372159bbb094c1b7575edca6b66103afbbf097c1fb70d33f"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e6af6299d8d3bd2bd40430832bd113df906c5ae"
        }
      ],
      "purl": "pkg:npm/glob-parent@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-dirname",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc33d24d525e099a5388c0336c6e32b9160609e0"
        }
      ],
      "purl": "pkg:npm/path-dirname@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-dirname@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "3.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3168a4825f67f4cdf0f9ba6c6371def0bfb0f5e17ddf7f31465f0800ee6f8838b3c12cf3885132533a36c6bae5a01eb80036d37fcb80f2f46aaadb434ce99c72"
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "615210f368193c605e6d057f6bc75aaf8022b73090b348e35f030f6659695cc6868d73d85546b04b142b46c8e18eea7257112f6c781498884a565343fa3d3690"
        }
      ],
      "purl": "pkg:npm/arr-diff@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a57915a387d254b9ddb01f584fb3dad9059df71fa4fd1ce88bd2ec069c6c7d16913ac0a1b27d6ba099b904388b3aa96ad9860d0b59e2f388bac4c10261b3999"
        }
      ],
      "purl": "pkg:npm/array-unique@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68d75b9e3f4ff0f8dd5d4e326da58b2b6205de373f1280d86c2ec06b35bab68dd346c7d7c6c702f545ce07988388442b93221b5a9d922d075ae3e4006bb9dcdf"
        }
      ],
      "purl": "pkg:npm/braces@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
        }
      ],
      "purl": "pkg:npm/extend-shallow@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d544811d428f98eb06a63dc402d2403c328c38f7"
        }
      ],
      "purl": "pkg:npm/fill-range@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c80c17b9dfebe599e27367e0d4dd5590141db38"
        }
      ],
      "purl": "pkg:npm/to-regex-range@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c588d7d1712bbb28addebccc983ae0b3bf72f5d135bbc82d46dbff92b4c8caf18e95a9dd8c1bbaff423c38821b6e08e8c5be59e6b3f88c98baa9bd6fc44bf59"
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc8e9d637fc021d355738cc2f4afdba77e928e6f5a52030face8509ecb5bcbe1f99042f107658ef7913fe72b36bb41c22a04516cbfe1d32d6c18c0e22a0d96"
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base",
      "version": "0.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e53e8fe313e0a69d180c5bd25b0119e0da04dda3384014170f39956eb6829058fccc733e99b6bc4b2a81e436d95b247b9981e8e98ec1750a373280389b44de42"
        }
      ],
      "purl": "pkg:npm/base@0.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base@0.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base/-/base-0.11.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cache-base",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00a71d4e71525804dde7f1823d1c6bd82870209f3909ecab1328d11e52b1439e9de1724c1b29b4b8088a9f4c5b2ce18e977fb24693938b8f38755084739014cd"
        }
      ],
      "purl": "pkg:npm/cache-base@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cache-base@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collection-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d90abf311e3010635061d9faaeb3f6948995ad0a58040fbedce1115f7e886c90606fa906997bc4a0e1c683523991f6861bf4bf9934cb6c80338a384a3a1293"
        }
      ],
      "purl": "pkg:npm/collection-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collection-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-visit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
        }
      ],
      "purl": "pkg:npm/map-visit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-visit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-visit",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f79c4493af0c5377b59fe39d395e41042dd045bb"
        }
      ],
      "purl": "pkg:npm/object-visit@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-visit@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45ddec7ba401fac3b54f0a998ec710aeeae910f21f3b4ff26274a29fa43fac3de63aeb47bd4ac202126e6f7afdd2e35bf9211206e134418a01f7461d7dab6c46"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-value",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
        }
      ],
      "purl": "pkg:npm/get-value@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-value@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18b281da585b1c5c51def24c930ed29a0be6b177"
        }
      ],
      "purl": "pkg:npm/has-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95b0b63fec2146619a6fe57fe75628d5a39efe4f"
        }
      ],
      "purl": "pkg:npm/has-values@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-value",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2711dcd7078237af30458d1f842a17a722b9e66fd73c769f3a62b85160fb9b6088d7818c705ca9b78c3fd3e355e5ffd931bcb617a4b6c3003b7e0ca787d8164b"
        }
      ],
      "purl": "pkg:npm/set-value@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-value/-/set-value-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-value@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-value/-/set-value-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split-string",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3733558490d8a7071e5558a2f3f1eee8329f0f61be36b407952fd5fea82fefadc462e755c0470c40dc5dda587ed15ad40725cdfe826497982b3a1616bd05188b"
        }
      ],
      "purl": "pkg:npm/split-string@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split-string@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend-shallow",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26a71aaf073b39fb2127172746131c2704028db8"
        }
      ],
      "purl": "pkg:npm/extend-shallow@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend-shallow@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assign-symbols",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43e242ed686ef078664dd06987f4eae7d22846da32e8a026e73ccfbf4d1676e8d7f3695b00bf0aed65639deeef742b0099b17801868338fc8ede4d2497ca88af"
        }
      ],
      "purl": "pkg:npm/assign-symbols@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assign-symbols@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ab9d73314f5861a0aa3d9352d976694dc897430dfcb6bf47d78c5966a24e3e8bcba5ffa5a56d581ef5b84cef83a934f40f306513a03b73f8a5dad4f9de27138"
        }
      ],
      "purl": "pkg:npm/is-extendable@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-object-path",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "297588b7b0e7e0ac08e04e672f85c1f4999e17af"
        }
      ],
      "purl": "pkg:npm/to-object-path@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-object-path@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "union-value",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b497d79b131e5989dccc256ced7004bc857b89ea6900b7727a958c90793072246966b686ff1c13facd8937cfa9af5fbc8c245ff34145cefafe32941e7a81785e"
        }
      ],
      "purl": "pkg:npm/union-value@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/union-value/-/union-value-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/union-value@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/union-value/-/union-value-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-union",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0aa72784459d36bf515e0994fc96b7c9ab9bba8281c2b694c0ccfc0961eedcf123c539ba0d8cd835bf3d8be154e7f53e0f431131d774db5cb99851c4ba520ed"
        }
      ],
      "purl": "pkg:npm/arr-union@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-union@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unset-value",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
        }
      ],
      "purl": "pkg:npm/unset-value@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unset-value@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-value",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7b1f58bada62ca827ec0a2078025654845995e1f"
        }
      ],
      "purl": "pkg:npm/has-value@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-value@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-values",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d61de95d91dfca9b9a02089ad384bff8f62b771"
        }
      ],
      "purl": "pkg:npm/has-values@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-values@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "class-utils",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e84f6bf163eece9363c1fc7ac1aee5036930c431cfbf61faeaf3acd60dea69fef419f194319fe5067e5de083b314a33eab12479e973993899a97aeae72cc7a"
        }
      ],
      "purl": "pkg:npm/class-utils@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/class-utils@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46bec00e34197a771e54e00aa29e802e49110261f50381b1f6157fed9ba33d4376ae4013a853b42592d92276c08e9658a09d60531f0c44c4159187a671b3124c"
        }
      ],
      "purl": "pkg:npm/define-property@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af0d8af4481dc3c0ef73b0ca2fd20282112158a829c4e21abfe33dd375496e904cb9b7d0b4611abb1cbaec379d8d01ca9729a7a97820f49fe0746ab9d51b71e"
        }
      ],
      "purl": "pkg:npm/is-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b5ee648388e2c860282e793f1856fec3f301b56"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "346104ae71fa176bd4b970e1f8e95b70a5bbff039c7dd447699ed55ada82ced7c7ae2ffef982a63f9d4e7567863eea8239b6ba924d8e4dee5dd365664c1f343f"
        }
      ],
      "purl": "pkg:npm/kind-of@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "static-extend",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "60809c39cbff55337226fd5e0b520f341f1fb5c6"
        }
      ],
      "purl": "pkg:npm/static-extend@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-extend@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-copy",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e7d858b781bd7c991a41ba975ed3812754e998c"
        }
      ],
      "purl": "pkg:npm/object-copy@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-copy@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "copy-descriptor",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e0674a4571a9045256f040454d837f90022b351724cbdd07a5f45632f294a442aa06dcf3684f46ce090b4e5dc3a4babdb5af612ada423e204fa0b2600456563"
        }
      ],
      "purl": "pkg:npm/copy-descriptor@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-descriptor@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7194d82855aca6df6366c32c716a3cb1cff995b3c2f50d0de6704b81bf9877dd7988bdee741d6e1604b707c602c7ae94547ab4d7c0c0545a1e7bbc7e83182078"
        }
      ],
      "purl": "pkg:npm/define-property@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-descriptor",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9e8ace56a90195ee97a8a03c8b98d10f52ba6cf7e4975f973da4bdf1101fb87bd1e71ae0daee607b907c47c3809ba92f64d53da1387de688bf27f16b62615b6"
        }
      ],
      "purl": "pkg:npm/is-descriptor@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-descriptor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-accessor-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b98671d391c56c3dfab1dc02a5cadb483dbec9f97ca41ef24fd81f5b6438e584b22812ae17a0aeb8560edba199555982ba2d463de1d60f104ecb87466464a71"
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75c4b5ba5fbdb66783f794fec76f3f7a12e077d98435adcbb2f0d3b739b7bf20443bb44fa6dbc00feb78e165576948d305172ba45785942f160abb94478e7a87"
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-data-descriptor",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8db457cb5166b40a028d0915988558c2ebaa0c551b68e7838e679dd6d3863ebb0c86d240e2b0fdb64800d05d6a2778111515dc1d856475e68fe74439ac4fe32d"
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-descriptor@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mixin-deep",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "591a039fffe65c1889d47e34aea6b7bc7d2da1e3f04ac19be398889d6953c926be52ee24ded6144b16b6bf52aa0222edbe5ad2cda131a92d60b64f7a03dcef10"
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mixin-deep@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascalcase",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b363e55e8006ca6fe21784d2db22bd15d7917f14"
        }
      ],
      "purl": "pkg:npm/pascalcase@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascalcase@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-cache",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-cache@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-resolve",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1edcfe467b175a4e7e3f6b25c79261dd0ebabe1423d429659b4cef9da63df3e345c7e0efd8217f7f93bfb7cc7e29a35dadd200b2bb8dce887f2a989a95ba809f"
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-resolve@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "See https://github.com/lydell/source-map-resolve#deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atob",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a6eae92868e1898bfef7a7f725d86bcb8d323924cd64fced788ac0fbdd830bf12b6b1ffeff9511609a0f272026600f76d966f8f0086c6d30e0f7c16340bbc72"
        }
      ],
      "purl": "pkg:npm/atob@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atob@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/atob"
        },
        {
          "name": "cdx:npm:bin",
          "value": "atob"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decode-uri-component",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8637fec68bdc127df5c3f11461d4d7421ffcb2614bfddcd88e88501842208f235abda25f058da9e45e76ec1a3554f013c6fd15613502d9b39c5efa85c24efc3a"
        }
      ],
      "purl": "pkg:npm/decode-uri-component@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decode-uri-component@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-url",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2c637fe77c893afd2a663fe21aa9080068e2052a"
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-url@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "https://github.com/lydell/resolve-url#deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-url",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70f8853932d42af245220e1229549ccb88a53cf5baac580c81fb9924f3680ee32cde70b51db314c9c068270efbc45229eb3d5425024e7f1e82f46307f340e24f"
        }
      ],
      "purl": "pkg:npm/source-map-url@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-url@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "See https://github.com/lydell/source-map-url#deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urix",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da937f7a62e21fec1fd18d49b35c2935067a6c72"
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urix@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please see https://github.com/lydell/urix#deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "use",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73011255794edeeae5f585a5156fd303d72c842121b6eec8289fe9e6ca09fe01a98fbbdbbc5ac063f7888a843a0f0db72a3661620888a3c1ceb359d0dafaffa1"
        }
      ],
      "purl": "pkg:npm/use@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/use/-/use-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/use@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/use/-/use-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-node",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b6ee5e3168c62dfd1490e53477be9582001e4a6ff73321ca9414e33f0b87d870b9db6547353e48d300c8e87f6a4159a493c0e51deaa5077051951a3eda2309f"
        }
      ],
      "purl": "pkg:npm/snapdragon-node@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-node@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snapdragon-util",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99b2a431d40ab235f80402f86d16138f6d5e74e7fc70ded71dd6142447be667f7d85511870cbca3dcb7522a35eefe0193e2ae7f01083390047419927aa62a565"
        }
      ],
      "purl": "pkg:npm/snapdragon-util@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snapdragon-util@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "156b6578d02d67f2a2daab6a7a3d825d339ac8e1fd6c70d017e438f15a56c835e36d8c40e18cfc883077d735ce05494e1c72a27436ea195ad352f40c3e604607"
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-property",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f02b6515e1c9cfa5b706efe55101129364f516a30c1703c6f31f934feae774a1e031c983ee1995000bb84cba0a42773e01792665d8397d93ae821c9ff8e9961"
        }
      ],
      "purl": "pkg:npm/define-property@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-property@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-not",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27a4838d4803c508f936eb273ad745c43c0dffe1d6ca447c1842f072d27b99daa1732cb5c44738491147517bf14e9ebad586952808df44b67d702a92ead9f7d8"
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-not@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-regex",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40a3669f3b077d1e943d44629e157dd48023bf2e"
        }
      ],
      "purl": "pkg:npm/safe-regex@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ret",
      "version": "0.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a"
        }
      ],
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ret@0.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3666fa4179042ecb81af6e02252922968e941c781b7a42b95226607c4e941c3dc46f6ed80baa03f9b85c4feb49e9c97c766b20750c675a572bcbc92c04804ba7"
        }
      ],
      "purl": "pkg:npm/extglob@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b77735e315ce30f6b6eff0f83b04151a22449622"
        }
      ],
      "purl": "pkg:npm/expand-brackets@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "posix-character-classes",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
        }
      ],
      "purl": "pkg:npm/posix-character-classes@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/posix-character-classes@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fragment-cache",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4290fad27f13e89be7f33799c6bc5a0abfff0d19"
        }
      ],
      "purl": "pkg:npm/fragment-cache@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fragment-cache@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanomatch",
      "version": "1.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e9a1ed93d116c7c014c150e7ed01f04f683122d3ab9f6946a2d2613a627d6469c7374a74c4adf6ff87e5fde155f323ae2b2851d82265d2bddc061829b03aa08"
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanomatch@1.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.pick",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
        }
      ],
      "purl": "pkg:npm/object.pick@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.pick@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6582a1dd6876cf53e91175abd0ca52059d15ea66470107d87afb6d3b5d5ce7509a5a319369a762299fb056dd4f6cc943579aa1305b25a5909e9a1c0e2bb0bcf4"
        }
      ],
      "purl": "pkg:npm/slash@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-2.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "slash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 16
          },
          {
            "location": "lib/resolver.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15de200016fec9c18098aa2ef1e31fb42ba94a2af9951c6a7f8683fef774703daa7381cbd3b3a309eb8732bf11a380a831a782283074fc40813955a34f052f3d"
        }
      ],
      "purl": "pkg:npm/is-path-inside@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "8.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afce44dcd759fa6a589350ba4633c510c484facd6264cb87b6c1c0a98d034f78d973397476259467c83aa14ee1d0cf5c0f610bf8fcda62086108bcd1d19367e5"
        }
      ],
      "purl": "pkg:npm/meow@8.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/meow/-/meow-8.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/meow@8.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/meow/-/meow-8.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimist",
      "version": "1.2.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e1b8a2c846b86f08f2eac0f731e8836a98a7a2039116aec08e3e1ae5152adbae653864c3e38f9525fe82c23033bdf17454230566efcc480b3e043c27a4b7379"
        }
      ],
      "purl": "pkg:npm/%40types/minimist@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimist/-/minimist-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimist@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimist/-/minimist-1.2.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/minimist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "6.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62bc1a034bc429accf0649f48a94e232949a8d80d27be2a341fae385c04cc49b7fce76ef94777c3f0fd56a66b3e4407859f86cdd2511dd9f66c11bbf3f7b3762"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@6.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-6.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-6.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85d375c15ad96dbdbd7811a21a325b78ff096ca8ead6eae41c9fcb20ffcd638f0c6754155d4b10055d46d73bd81479f55c4d3a7308c1b0e2362b75259e3d585d"
        }
      ],
      "purl": "pkg:npm/map-obj@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-obj/-/map-obj-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-obj/-/map-obj-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "quick-lru",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "011842a66ef47f375cbcd41f3e8cb8f4869a9ca913951585d89333aa17096e1485459bfb9cf4ef64975c63bdf4d483e6bd6fbfa744602169d00cb27189fb10ee"
        }
      ],
      "purl": "pkg:npm/quick-lru@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/quick-lru/-/quick-lru-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/quick-lru@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/quick-lru/-/quick-lru-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize-keys",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1c2d6b98cd13e84bd6df892743777731bebce8bd53199d10d513302cfa15885571836c7c563040a28f6381bb207f027d05156fe72eeaba2afd62fd80b941fce"
        }
      ],
      "purl": "pkg:npm/decamelize-keys@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize-keys/-/decamelize-keys-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize-keys@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize-keys/-/decamelize-keys-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
        },
        {
          "alg": "SHA-512",
          "content": "ecdfeade5c99f8b542a7b3f3bb1ac9af828c6c1136856ec14fb60d89adf7d0e17121fe1ddebe7356989c3f6eb9d25ec23cde9133dcce251977346a6a4a2c3712"
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hard-rejection",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "548641fa26c3871ece6e101eece56da046ee3f887f32e3931c9f89f21fde057a2d2589747c1811ef6c431422a0221db638964839537104c5ae840af5d2bf0774"
        }
      ],
      "purl": "pkg:npm/hard-rejection@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hard-rejection/-/hard-rejection-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hard-rejection@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hard-rejection/-/hard-rejection-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist-options",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "438afc82177cd3284eff48f53b7076063c1e5f77e21e0f5c74ec2325dd89efa435df973e343c460aa758290d52281b857e059b014cc17ef6233d411e360a8dd4"
        }
      ],
      "purl": "pkg:npm/minimist-options@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist-options/-/minimist-options-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist-options@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist-options/-/minimist-options-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc26337b1f4cf451908c218c1b28baff7d5cf0625b81bd2a1b2af1e475b13ddd1a0b0878701d988cc6f65dff54ba8a20accae53bd713aa7079ac8e461d94dc50"
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "arrify"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/resolver.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "71a50c8429dfca773c92a390a4a03b39fcd51d3e"
        },
        {
          "alg": "SHA-512",
          "content": "caf911cb1985284390e293570a6246e401103655c94b92da38d5e8e7f70b75365d5afb19d62a091289cb180a2c2a531613c970532fdb273323730f1acfbdfe16"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a765b5b20aa28f7ccc332442d3aec3835e9b7f3547fb0ee1c9e826a48bd9e09363aad18e54022f2e68c1c77c8fed84def6f289824a0d38f8f0406a200e831714"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redent",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ead0c0f20f7c59ed337741af55e313f5aac43a74f0f6a334dcbf5c2576828eb8a9d4e3bbeb844304b05fac1e1cc333460e3e4e0398a8ca60bd1a48b381624352"
        }
      ],
      "purl": "pkg:npm/redent@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redent@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-indent",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95a2536b725bf95429682e83b1e1e117b75756a1d37c93c24436846e277f76b3a1822b60624bbf95eb4c52a397168595d3320851b8e9747dadfad623e1b40c45"
        }
      ],
      "purl": "pkg:npm/strip-indent@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "min-indent",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23d8f0327d3b4b2fc8c0e8f7cd59158a4d894ef8296b29036448a02fa471e8df4b6cccb0c1448cb71113fbb955a032cb7773b7217c09c2fbae9ecf1407f1de02"
        }
      ],
      "purl": "pkg:npm/min-indent@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/min-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-newlines",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7353d3b00ded62b22c2c69099331c5fb0f45d84cb17d71a8e14c89738a452fef853239ead07252ebd4f733b77ffe02ab14ac32e36f5ba2e3deb1c6e379c53e67"
        }
      ],
      "purl": "pkg:npm/trim-newlines@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.18.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3880185e4f3e21263ea933b0907b4aab302ec5c8683220fd51dc7e1521900ee89147e3c92891dcd8d2405e56e1906c13b7fe3f9ca67110b635c3745e58e2fc9b"
        }
      ],
      "purl": "pkg:npm/type-fest@0.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.18.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.18.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open-editor",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3436aa1aee4f05e002b5a1214c20885892ef9eb2c5e20a58d1d8bda457e6e5e63f7400d81b420cc4793759bb6dcbb22903a33f8a7e1c911e918b030a5086e80"
        }
      ],
      "purl": "pkg:npm/open-editor@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open-editor/-/open-editor-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open-editor@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open-editor/-/open-editor-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "env-editor",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39b168f2fe2b409004e7d33af50cf0968c4f66d777dd3a581088ed283d6bac50dc33519dec8903c44054f87ae2ce237a1d21d09c1262f039b2f895a46afe4728"
        }
      ],
      "purl": "pkg:npm/env-editor@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/env-editor/-/env-editor-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/env-editor@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/env-editor/-/env-editor-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "line-column-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f3dc0faf8b86c4961c1deb613df9093f7fd04360b4b30ffe07cb5ae2af42381a73314937b34b29b300dca98793753e0459dec49b03ec91e613ae5f173bd5ad1"
        }
      ],
      "purl": "pkg:npm/line-column-path@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/line-column-path/-/line-column-path-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/line-column-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/line-column-path/-/line-column-path-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "230cc0fcb49f0f6bc2d7f60360cbffcc73f8ac3175bac0b0965b03a5ba254f70f87d47a920eedff4aef48e39947b053f2e6194289730715b430a99ca93804f33"
        }
      ],
      "purl": "pkg:npm/type-fest@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open",
      "version": "7.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3151dd743570797645ddac2d9404beea980a2e59bf260c59f74fbf341bab06841cb5538e07fcc37558dcc8fcd0fb495a0c66ec5a0ad191f948eb9b1078e813f5"
        }
      ],
      "purl": "pkg:npm/open@7.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open/-/open-7.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open@7.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open/-/open-7.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-docker",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17e8b604ab05ac7eba89a505734c280fcb0bcbc81eb64c13c2d3818efb39e82c780a024378a41ea9fcfcc0062249bf093a9ad68471f9a7becf6e6602bef52e5d"
        }
      ],
      "purl": "pkg:npm/is-docker@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-docker@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/is-docker"
        },
        {
          "name": "cdx:npm:bin",
          "value": "is-docker"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cacc0adad2b18951407018180d90766e4e865c9fe4ed5c7a5e0a09a430930c631d6c40361a092ca32414826b69c7d431a6eecde7d68067a21a154c168decbc3"
        }
      ],
      "purl": "pkg:npm/is-wsl@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-reduce",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d94480a6f9ecbadabcba8c590466db58cd092182e210c27d46568dedf03354d6fd3993744878e34d37c871bebaed7ca74b9635561c032550daef64e73f30185b"
        }
      ],
      "purl": "pkg:npm/p-reduce@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-reduce/-/p-reduce-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-reduce@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-reduce/-/p-reduce-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-cwd",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ab65a5f631bfab242a47ffa0a94aab7dc4556937efb1d355e737689ef60e8fe7fdf17a52c0917595003a5dcf52070ff2857c45f213a574534d4e43750edab12"
        }
      ],
      "purl": "pkg:npm/resolve-cwd@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-cwd@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-absolute-glob",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1865f43d9e74b0822db9f145b78cff7d0f7c849b"
        }
      ],
      "purl": "pkg:npm/to-absolute-glob@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-absolute-glob/-/to-absolute-glob-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-absolute-glob@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-absolute-glob/-/to-absolute-glob-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74e5a8a9f96f73274045adfad06befd7c0d9fe046e1ca8b6354ff05395f5645cdd61f1f6f67922359b05de6a78389dc7e32a3d331f00fee006373a733cddf204"
        }
      ],
      "purl": "pkg:npm/is-absolute@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b0fd178ad22ab029ebb43084cb16e8f48db3c098488eb08c32217bef6df6ba41f98df69903d4cfbca5d93b465fdd4ca6c7df8fd704531b803e2230984b41b18"
        }
      ],
      "purl": "pkg:npm/is-relative@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unc-path",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ab1a955dd1fb3b5962df56c4adbe017a8842676e30c5661f7f7a68510dc1964ddb937cd1ddf421de5301f781822375bc28e0e9fa86e9e4cedc0e680c34ca595"
        }
      ],
      "purl": "pkg:npm/is-unc-path@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unc-path@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unc-path-regex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
        }
      ],
      "purl": "pkg:npm/unc-path-regex@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unc-path-regex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-negated-glob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6910bca5da8c95e784b5751b976cf5a10fee36d2"
        }
      ],
      "purl": "pkg:npm/is-negated-glob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-negated-glob/-/is-negated-glob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-negated-glob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-negated-glob/-/is-negated-glob-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-notifier",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22d9c80876de321f46a94cb7d6114fac3d6472e677ae9c4365b7f82940dabd7c12d1b5b99bb48b6c3429197dd462bd3bd9c6eb17984552cdebe6d52c3f08df1f"
        }
      ],
      "purl": "pkg:npm/update-notifier@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-notifier/-/update-notifier-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-notifier@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-notifier/-/update-notifier-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boxen",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6062040a5f1fb59cff263fb0b3172694011860ec3de7d5d17f16712b5a6bbd97a26f1a9354376efc8746926fe423a22292586fa2677b87adcaa4d2aad8f5141"
        }
      ],
      "purl": "pkg:npm/boxen@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boxen/-/boxen-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boxen@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boxen/-/boxen-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-align",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20e7f0c0117989ccce8e9fd6798e18c728ea005310a19b9f750583775f52104c5b54b357aafa73489fcced96b8fec08f990d3e191aaea00edb19c20d7317b0eb"
        }
      ],
      "purl": "pkg:npm/ansi-align@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-align/-/ansi-align-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-align@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-align/-/ansi-align-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-boxes",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb872831cca581209d5629e388306e47c3c20b66cb8f2193c0498f6fd34747f41a354e8450e5dc4d8fece958c6303e8435211a790607098d063464b98df3303f"
        }
      ],
      "purl": "pkg:npm/cli-boxes@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-boxes@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "widest-line",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36c9a85da96c5950cc1aea71679474f246bd7e56638e22ef1d501660e2ad88a33cba3b595abf5c45f7da93eb92138f3e39bf0e6da957a70c9e522c830fa40582"
        }
      ],
      "purl": "pkg:npm/widest-line@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/widest-line/-/widest-line-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/widest-line/-/widest-line-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "configstore",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68c2a9ae093962104dc87db9863f301addbe0f9d92c350d1448cea0702e9d986bd985998f0a3efbedbe69daf12c5547d24c678933303ebc376daf95a46991e14"
        }
      ],
      "purl": "pkg:npm/configstore@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/configstore/-/configstore-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/configstore@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/configstore/-/configstore-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-prop",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40cf2adf30dee7c86a52a8eb6903a6cd9d4b207f525902539442821f8909da842f2d993b45b417bed0ccd9712addfc2457d082bef1f82c0d0057ea2016c04cd9"
        }
      ],
      "purl": "pkg:npm/dot-prop@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-prop/-/dot-prop-5.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76ba831b771b733c7110946839770e8ed769d49fe5ca9d66367d316b39d1b3cfa6b8186041cae76eca68c795f97cec341e73276df0f3be710c12da83109128f3"
        }
      ],
      "purl": "pkg:npm/is-obj@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj/-/is-obj-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-string",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8d69e8ab10fbe96564a0cf0b0f1ad536cd5493ae7ffc2f9abf21ec59987d1e1fa480ef70a6000e54e06c0e453c50019b3de530172cda9e2e83cf34ee6065f5a"
        }
      ],
      "purl": "pkg:npm/unique-string@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-string@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-random-string",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf5a65203df2f6bfe53e1be2275c2b5e92dec94206019d921cd61311aa66efff00f672cfa32bd5a7744afc43c5aa7e641339f25a061936c46d6182166ee1bc28"
        }
      ],
      "purl": "pkg:npm/crypto-random-string@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-random-string@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d23611090de8d9615ee1e7406884bd3d12bf5568879faf62cc01fdce126a429233a2df8798c906005d44e3110b5925329c17413650a4e1fa8b032ec80d8a6f5"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-yarn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52a051aa2e23bbb4fe4ea18d76a00ed0f692546b0318950142f93d79458d191635085183cd884b5a833b25011e9a796f55cbff60499cdb0356f010b6e049d4b3"
        }
      ],
      "purl": "pkg:npm/has-yarn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-yarn/-/has-yarn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-yarn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-yarn/-/has-yarn-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-lazy",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "05698e3d45c88e8d7e9d92cb0584e77f096f3e43"
        }
      ],
      "purl": "pkg:npm/import-lazy@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-lazy@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-ci",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61f253eeb929401d2ea5db1d1cb196aef84125f71fccd35ac180cd232417273d0856219fef93bc1013ca49dbf0dab17e2c60ac5f8159f2d72bddbd7d2dc66ae3"
        }
      ],
      "purl": "pkg:npm/is-ci@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-ci/-/is-ci-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-ci@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-ci/-/is-ci-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/is-ci"
        },
        {
          "name": "cdx:npm:bin",
          "value": "is-ci"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-installed-globally",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b01aa3b7276d5a692902ee35a71cffdd89f6b3c12ed215e22ac6feb012d2d4f18e4a9731538f2a9c4884f477cb38f9d0e12b2b6c93d3c96760644b9799c1045"
        }
      ],
      "purl": "pkg:npm/is-installed-globally@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-installed-globally@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-dirs",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfc868d834b94620a37ed8f59c3f4d9a77da3b34ddb9ded146755df6414d3a3a996c84a5c790d0f8ead3932c20774748b7ba050af29eb59487a0770fdec0dd88"
        }
      ],
      "purl": "pkg:npm/global-dirs@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-dirs/-/global-dirs-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-dirs@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-dirs/-/global-dirs-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf9c5e283770af645db7003840e7045a60442927cab281291bb535d605e5d65e61154572bed484dc8875b01e1b23bf54e65b432069c22fea1122e695f935074"
        }
      ],
      "purl": "pkg:npm/ini@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-npm",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "596feb40b39acd4abe493fdb080541a7fda83044562ec47b3ab2b2b74e7674d0e4e031dc0c4d3fed04972139668be541715d770df21bcac1b7b59266e517dd04"
        }
      ],
      "purl": "pkg:npm/is-npm@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-npm/-/is-npm-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-npm@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-npm/-/is-npm-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-yarn-global",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56349e6ff9479a4a3277caf23d520abce0a7e03d64a0ca98fafab28e351f737c722ad3f87583b1338e2c66b9ea412cd276cdf1c8ead44cb4c2f4b5425602e783"
        }
      ],
      "purl": "pkg:npm/is-yarn-global@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-yarn-global/-/is-yarn-global-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-yarn-global@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-yarn-global/-/is-yarn-global-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1e4feaf491391141d09d60236d90cc165d04cc12cc0aac50649b872440e315861aa120c235513da1323fb58a28088604999b98139ab45704da06520693635c4"
        }
      ],
      "purl": "pkg:npm/latest-version@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/latest-version/-/latest-version-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/latest-version/-/latest-version-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "6.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9376dd9b69f6e6d932c5c8d22b3079c7c91f57194c760b1b3ebd069197301ec2e96dae9c063a82b752a570284a12fc4721c4c1d4554cbb0a228d9dbac5ec7931"
        }
      ],
      "purl": "pkg:npm/package-json@6.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json/-/package-json-6.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json/-/package-json-6.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "9.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47b796a6d5ee198c708a3b34795fafde8ebe5c7d48a952bc74938479c41f4e6927730f4057875cc3f0e1c62f0c765a8fb61c71a59ca2ccccf283c453984b06f9"
        }
      ],
      "purl": "pkg:npm/got@9.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-9.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@9.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-9.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sindresorhus",
      "name": "is",
      "version": "0.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4d113f75d0335a20f9e06272cb3de83e3a0ceab22f6e3389926e8539cbaa7c4b90f3313544b0966b6b08be0680cd51505ad83849a9061416f3037e0534eb62d"
        }
      ],
      "purl": "pkg:npm/%40sindresorhus/is@0.14.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sindresorhus/is/-/is-0.14.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sindresorhus/is@0.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sindresorhus/is/-/is-0.14.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@szmarczak",
      "name": "http-timer",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c80765dbcc74cdea27888df20c57d86555c7cf536eacdaf69f61641c6475971cec62691658103284c1d975dbd672839d3e7e8615da30a0b6ba9203aa8db8d48"
        }
      ],
      "purl": "pkg:npm/%40szmarczak/http-timer@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@szmarczak/http-timer/-/http-timer-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@szmarczak/http-timer@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@szmarczak/http-timer/-/http-timer-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defer-to-connect",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0849d368bac1ef653d84885959799007054bd2c662acc150847fc856eca5a01b86bc31512eff755beae598a33923ca5c82c5ed090488910758d5e394bbd1655"
        }
      ],
      "purl": "pkg:npm/defer-to-connect@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defer-to-connect/-/defer-to-connect-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defer-to-connect@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defer-to-connect/-/defer-to-connect-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cacheable-request",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a3ddc0063c2a8e657ed1cfae149f2d8660064d962412a9f6de3eb800435c0a022858982527ada06d26d29c191e31cfbc05f8ba090beb2c159befe41805f4882"
        }
      ],
      "purl": "pkg:npm/cacheable-request@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacheable-request@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-response",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca32d787cf0fe7df543b23d3157d0f3ac77b5b19dbb15b06a21730cc738bb292218696a53f0d4172a103f0d6e5c992ca706acbf1d4e032571a6715768c00f8d5"
        }
      ],
      "purl": "pkg:npm/clone-response@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-response/-/clone-response-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-response@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-response/-/clone-response-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-response",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f911cb67907eda99f57fab91e09a86a5d60d901c5251ada3ad9b1d09a48aa4c6106123f9494a5d67329438e6155aaf03444cea161229a7759e102b4447c6ec5"
        }
      ],
      "purl": "pkg:npm/mimic-response@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-response/-/mimic-response-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-response@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-response/-/mimic-response-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c117e175ac06550aefe9eeb8f3800f986f895f617ae997b6ba56626b53cc05f48d422af3ff4303cd6479ce9706d3918e9dbed148cc5312c905db2e84d03d1a4"
        }
      ],
      "purl": "pkg:npm/get-stream@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f0672fa9dd216cd4fcad77f8d872de30a6fe3d1e2602a9df5195ce5955d93457ef18cefea34790659374d198f2f57edebd4f13f420c64627e58f154d81161c3"
        }
      ],
      "purl": "pkg:npm/pump@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "keyv",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f72909ff8e9237ff4a3ccfec89c87343b3af5f218360a19368394a306080960d942bc291cb88dbd1df2c15cfb44edd186274e1abc5f645980283be113f181c54"
        }
      ],
      "purl": "pkg:npm/keyv@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/keyv/-/keyv-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/keyv/-/keyv-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-buffer",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b1f397afc75d677bde8bcfc0e47e1f9a3d9a898"
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6a357ad2efca0c384ef734cc4ae0430b42c428c167fc8caa281fd83bc4f6af453ef4e91e9b91027a0d8d937bb42e91a66cba5c5adf4c10edb934a66e1788798"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-url",
      "version": "4.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f546421511d074dadf4e91a0f3ed4834883ddc1eb3134697315164c35585c2f3b84a5672c14e9a2e0e4e7f4029fcf81c6d2c382cdc6f3165cc7ae8303025f400"
        }
      ],
      "purl": "pkg:npm/normalize-url@4.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-url/-/normalize-url-4.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-url@4.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-url/-/normalize-url-4.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "responselike",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "918720ef3b631c5642be068f15ade5a46f4ba1e7"
        }
      ],
      "purl": "pkg:npm/responselike@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/responselike/-/responselike-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/responselike@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/responselike/-/responselike-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-response",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07344f42e6358a9faa0e89c03b3e368119bfa60f45efaf02fa7a55ff824eb31442dacabe46593e43864202c3a19c868cae06ab20b63e44c508bcc9a65f5a8010"
        }
      ],
      "purl": "pkg:npm/decompress-response@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-response/-/decompress-response-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-response@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-response/-/decompress-response-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer3",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
        }
      ],
      "purl": "pkg:npm/duplexer3@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer3@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18c6ade04279d7ad64232d877af2e5af896e363060be68f8d7729a400ee3b7857c078443b1fa4793b590f4656a7d8cb2c7c392fcbeba2a8c7eac944d9252caef"
        }
      ],
      "purl": "pkg:npm/get-stream@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-cancelable",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3bdd7c4e678ce9b7579d658673be1a856babaf41cd6fc146b42b405db4866040c0098fd21b79b1fe26480a65cf61f81d393ca1cb3939786a31b506636b55997"
        }
      ],
      "purl": "pkg:npm/p-cancelable@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-cancelable@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-readable-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22adb95c1b7acc3e67a4f8652d55c614ddff832476fea38370a34dc9331de2f6e6dfd1d468e8803383ccab478c542fd3931cfe66376c739e60f72cb3f98ab4d1"
        }
      ],
      "purl": "pkg:npm/to-readable-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-readable-stream/-/to-readable-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-readable-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-readable-stream/-/to-readable-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse-lax",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "16b5cafc07dbe3676c1b1999177823d6503acb0c"
        }
      ],
      "purl": "pkg:npm/url-parse-lax@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prepend-http",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e92434bfa5ea8c19f41cdfd401d741a3c819d897"
        }
      ],
      "purl": "pkg:npm/prepend-http@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prepend-http/-/prepend-http-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prepend-http/-/prepend-http-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-auth-token",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea09126f853a696241e1217666f2dbefac8206372fb9f5c1aafbc4c751db98a3e4badb308d6d71355458d3e75a96321845ba2037b3b47ad61295b89a110c8ccb"
        }
      ],
      "purl": "pkg:npm/registry-auth-token@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-auth-token@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76c682a2a3dd005dc4b6cb9289a5a2192fb00f207408944254812670617e7f813f18386dceb677c4dc056d79c1abc37e07b10a071c72485c66fcb0c9060f3b"
        }
      ],
      "purl": "pkg:npm/rc@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/rc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/rc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "255ff2ba0576bb35b988c4528990320ed41dfa7c6d5278de2edd1a70d770f7c90a2ebbee455c81f34b6c444384ef2bc65606a5859e913570a61079142812b17b"
        }
      ],
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        },
        {
          "alg": "SHA-512",
          "content": "e2007c9dad3b7de715564388e91b387bb4fa34e4e48b91262fb4d476e4ece9bbb711d9d2c9c9ed549e2b7bc920640fb0c7d22e788d98d756df6e0c2dcee13429"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1a7185d74c8d00910bfa4403a3137bce6885d9913f70a382ce15b04a6101049e730d0692aa754ac8e92e0d4f428f228fd656f279b44fd7e4b17f4d051fd1e93"
        }
      ],
      "purl": "pkg:npm/registry-url@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pupa",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9758cd02ca4805216a6d3fb2fb9168b288cda55a45f789e523ec03529a8ff5e9f03937c7c7d7f4821e6707deaf97eeb24e9b09b32a5e36bc1fccfacab87078d4"
        }
      ],
      "purl": "pkg:npm/pupa@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pupa/-/pupa-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pupa@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pupa/-/pupa-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-goat",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3fb8885b1b5d82b23cb62445bb0fda476eb79a55a4bf3a9377c9c9f2bc49537703399fa198e96e9ed883de99fbc665e50ca99f40ff71aa2193202a7061030fd"
        }
      ],
      "purl": "pkg:npm/escape-goat@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-goat/-/escape-goat-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-goat@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-goat/-/escape-goat-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-diff",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "197d08c7f089707c81f1ce329291c6200bcbc8ec0ea1bb4cffc77e4d090077cd7f6c48e03c7adf6dae355697acafb8d7fedf1487e477117f5e012e5b7be8d062"
        }
      ],
      "purl": "pkg:npm/semver-diff@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-diff/-/semver-diff-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-diff@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-diff/-/semver-diff-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-assert",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2b8b6ff8ff5b3a6fac96424dd2492c5ce6eca2bc218409dfe745f5d62d36cd82518c9ecc5243b942e26769de3387aa8dfe3918dd4a1ff3330934f78bdd3051"
        }
      ],
      "purl": "pkg:npm/yeoman-assert@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-assert/-/yeoman-assert-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-assert@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-assert/-/yeoman-assert-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-generator",
      "version": "5.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e596016f983130a0f32adab2ad2f8fcde765a520d256e9adc8dd7b650ab31bdff76a3b9756d273cd811d0bdc821421d7fdcb51076f564532cd90a77644105c6"
        }
      ],
      "purl": "pkg:npm/yeoman-generator@5.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-generator/-/yeoman-generator-5.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-generator@5.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-generator/-/yeoman-generator-5.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yeoman-generator"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/composability.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-environment",
      "version": "3.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21d4676d0b7f0d23929daa34a03f5cfa8af55f652b2fe7f1f5e0b43bb2eafcc19957af2786ff64efb32a1be84403248f4a5c82a687159617d0c15eb685cce4e5"
        }
      ],
      "purl": "pkg:npm/yeoman-environment@3.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-environment/-/yeoman-environment-3.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-environment@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-environment/-/yeoman-environment-3.9.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/yoe"
        },
        {
          "name": "cdx:npm:bin",
          "value": "yoe"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dargs",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da2cb51242dd941cd01af6f0798445c6615ab61f3e2bbf80281d139611d690db87f939a8bda307fd6a7b57b478bbb7f84a75f73a02ec53db75348f62a039d4a6"
        }
      ],
      "purl": "pkg:npm/dargs@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dargs/-/dargs-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dargs@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dargs/-/dargs-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "4.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f95b4fff5bb7fc531027f215d59f01bcb4bc1d894cb81492dc4aea4283a99a058643a7206f4c0a4aecacae2386ca8fc28e875af6607fbab9cb98b49bf56d364"
        }
      ],
      "purl": "pkg:npm/execa@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-4.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "execa"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/spawn-command.js",
            "line": 1
          },
          {
            "location": "lib/util/util.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "human-signals",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48442eeef97c2a334bd9ea0604b177fb0023a6c35f03d5cc9570188ffdc475a35f025c4ab610f5c631107c6394865942186255358df86d1afa94f20d84d8f267"
        }
      ],
      "purl": "pkg:npm/human-signals@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/human-signals/-/human-signals-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/human-signals@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/human-signals/-/human-signals-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "github-username",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed34eb463c5b95223997a69d93dcddf9c57977a8b53ab252a3756bf71746a852c1428d26cf93fd7887ca08327b79e91518614b6dc7b4a9b3d29e4b575760630d"
        }
      ],
      "purl": "pkg:npm/github-username@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/github-username/-/github-username-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/github-username@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/github-username/-/github-username-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "rest",
      "version": "18.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8033e238797219abf1afbdb2d20b901212ec7a68158f045e3dac89f8570a736489a8a51bc5b92f7f9900644580fcc2afb1f625400315ccd244ddecd0731309d9"
        }
      ],
      "purl": "pkg:npm/%40octokit/rest@18.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/rest/-/rest-18.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/rest@18.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/rest/-/rest-18.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "core",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed12912ae038c538cc858f9e1b78ed85bde19590ac3b0837af3b5687be5773e4a10d639f0c301359b799a401c1351a66e13bfd5a004c3b2d731096171ba349ed"
        }
      ],
      "purl": "pkg:npm/%40octokit/core@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/core/-/core-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/core@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/core/-/core-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "auth-token",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af915550908e2e5d7d0318ae643d95459fce463a7fe0837df0e7fa609a093a463be42201b987e688d1c6ac3c17afe68b186e798a097d42bc57de16e25e52dbfa"
        }
      ],
      "purl": "pkg:npm/%40octokit/auth-token@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/auth-token@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "types",
      "version": "6.34.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b35ccb0635a1744236cf06a84a0c8e168292975d3d09471504273b6e23c9dda01fe8b18b53ab330ef8b7d493d4edbc5f95ada5a9f8636db83fe437453713b01f"
        }
      ],
      "purl": "pkg:npm/%40octokit/types@6.34.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/types/-/types-6.34.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/types@6.34.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/types/-/types-6.34.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "openapi-types",
      "version": "11.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c1b153bed792929469a223c400cdaaafb0d95996b0e5c8025872b5c10af554c42a7b5675e39303e81478231095f1dd617d040c2403a9df09403b8bdb0e0f328"
        }
      ],
      "purl": "pkg:npm/%40octokit/openapi-types@11.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-11.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/openapi-types@11.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-11.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "graphql",
      "version": "4.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d20bfea8b4812ca174cfc4ca692293b12dfdb1c54a17d75b3312698f7534bc2ef08cd585b88a4bff3efa41ed9f8ae09b0d170949abe45ec56d312ebf76d410b2"
        }
      ],
      "purl": "pkg:npm/%40octokit/graphql@4.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/graphql/-/graphql-4.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/graphql@4.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/graphql/-/graphql-4.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "request",
      "version": "5.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c5265d08d4a55cf636137bdb5d186a4030fcb7d9d2c15d7a35752fd8c120932ffda777d5de1ec63ad7a444dc73d70d593e6be741bb3cb3e587655f07034ebd8"
        }
      ],
      "purl": "pkg:npm/%40octokit/request@5.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/request/-/request-5.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/request@5.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/request/-/request-5.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "endpoint",
      "version": "6.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "945de9b8fc2441619f90c0a55dbe24fde513fe764a41fc629d1589add65a24ef390eac28fc6d32382e37e09af6a23c1a7d624c62a14615ae66b388c9520ba374"
        }
      ],
      "purl": "pkg:npm/%40octokit/endpoint@6.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-6.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/endpoint@6.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-6.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-object",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5514b32a46cc9b98cc0e828b6e5b4090543942bed50e24c5197c581575e8c158f7f3b19e18d382b0e1fa32ccb4d12199dc5a7ce1bd4d69ad69b2a81c08810fe5"
        }
      ],
      "purl": "pkg:npm/is-plain-object@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universal-user-agent",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8acc8d6b1df05e829aba53c36561d0a9b988c75936b5bf5f6f71860c14710ac71f615d8287b5b13c0ac1b05106f2cfec69fc174d3ec7e101a1688913a7de38ef"
        }
      ],
      "purl": "pkg:npm/universal-user-agent@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universal-user-agent@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "request-error",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5522f817c6cf561d28e272c470abc3e54762d1db1e83c2c240685833762d097c9a0648ef26608fdc1c943ef456cddb569af83ae034b9f039b9b27920bc466a6"
        }
      ],
      "purl": "pkg:npm/%40octokit/request-error@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/request-error/-/request-error-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/request-error@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/request-error/-/request-error-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deprecation",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c661c8cb8177b1c295c0cb10e169d5692f1b1cec740e6570472c28b0a85a20b234cb030358fb414a4bb61cdc51bc5ee3b700d1b2813061049f6f18fc6fb46525"
        }
      ],
      "purl": "pkg:npm/deprecation@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deprecation@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66330f1447d5c798fecb6c85df92b3c79b05ee40f3c6e0e3eb3887e0515b3a9f3bcca0d9371f321312486f4e4e185e0d96df481c520c064465e3555dbdc35d6d"
        }
      ],
      "purl": "pkg:npm/node-fetch@2.6.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "966454e8765462e37644d3626f6742ce8b70965d"
        }
      ],
      "purl": "pkg:npm/whatwg-url@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
        }
      ],
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24534275e2a7bc6be7bc86611cc16ae0a5654871"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "before-after-hook",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de9644537353e41154a3f003e4444f58e8103826484e78ba89abebe40530e40530423325234933bb96ed9f20f7f4017481412c0cfc094fea18d4e4412628cf8d"
        }
      ],
      "purl": "pkg:npm/before-after-hook@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/before-after-hook@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "plugin-paginate-rest",
      "version": "2.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7331badb9da9b632de0086ec821efa51912d2867932fc307103d81ad32fe2d51ae649331b9f12541d1f72c2ee94e6507919ce81d9195a44548b2065874064cb"
        }
      ],
      "purl": "pkg:npm/%40octokit/plugin-paginate-rest@2.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-2.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/plugin-paginate-rest@2.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-2.17.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "plugin-request-log",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98b52c32480fecafdc9c5130d3b916a97185e4b2ab3a40fe9610ab2af3c75d60f2c00c2e0d4783c1606973af572b7a4d5f4b8a895b7c839cfde8f27acfdc4214"
        }
      ],
      "purl": "pkg:npm/%40octokit/plugin-request-log@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/plugin-request-log/-/plugin-request-log-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/plugin-request-log@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/plugin-request-log/-/plugin-request-log-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "plugin-rest-endpoint-methods",
      "version": "5.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b898cc4e437529a38880db543ccb485c33a3c7a746632b1d205860039db1e3149a7500b3ddbff325ec6f2130d5a403677ca3d6ffe134c643af2e7b6a318a6f88"
        }
      ],
      "purl": "pkg:npm/%40octokit/plugin-rest-endpoint-methods@5.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-5.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/plugin-rest-endpoint-methods@5.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-5.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e2c1c45cae4847bdbad96e745c15830b977d037e8bf71caab3a79b4ee5be29b7a1bf49ecca7188660e0d79cd7541b301e672d48040ace7a8d5b62cee6d4c3a3"
        }
      ],
      "purl": "pkg:npm/shelljs@0.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.8.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rechoir",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85204b54dba82d5742e28c96756ef43af50e3384"
        }
      ],
      "purl": "pkg:npm/rechoir@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rechoir@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sort-keys",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "694608114fd4be2a8f81cf261d1e885b5106c64017a5e4444d872bce0f1c2c0bd43d972902595e4971d5da663b1b5d86a61487e86ceffb830c5524a46ddb5e1e"
        }
      ],
      "purl": "pkg:npm/sort-keys@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sort-keys/-/sort-keys-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sort-keys@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sort-keys/-/sort-keys-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-test",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16968b5790225459587b8a62cc007f40b59cfb9052cadb64fd370541f8bfafc83faf3dbdd2ea84915e3068ddeb1c4bcffc30a6a0c35227290a4d93562f6cb4ee"
        }
      ],
      "purl": "pkg:npm/yeoman-test@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-test/-/yeoman-test-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-test@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-test/-/yeoman-test-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sinon",
      "version": "10.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c09f90f1b4654906505662b7182848560b3ec52f0646772bc0351c8ad3ae35f61c84a5d4f474c73903c55cc60e520861dce340acaa82ac7356edd426c93df37"
        }
      ],
      "purl": "pkg:npm/sinon@10.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sinon/-/sinon-10.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sinon@10.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sinon/-/sinon-10.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "fake-timers",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3193d4c6b985b9b237e974b50c8dea988d1874dd6092ceb626d159bf147aee58e348d09e2ba534f19c789ac116397ba87e0a94b7accf1d28b51fd7db8d1fcd44"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/fake-timers@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/fake-timers@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sinonjs",
      "name": "samsam",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d477346f54edc9f06ef22c45feda5f4874d558ac0204b6384096e482713b1dcc32bd3db102b0f16f82bb74c82a466deccc8f8b25bce65bfb38c71121bfa8700e"
        }
      ],
      "purl": "pkg:npm/%40sinonjs/samsam@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sinonjs/samsam/-/samsam-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sinonjs/samsam@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sinonjs/samsam/-/samsam-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec"
        }
      ],
      "purl": "pkg:npm/diff@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 2
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nise",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79030498637ff1aae9d31b2f1a843e075aaf4a447bdc1d675920a1ee73ade6778c0adc1c41561019dcd032170db1c92d4ec581e78c67952405cce00f243f275c"
        }
      ],
      "purl": "pkg:npm/nise@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nise/-/nise-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nise@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nise/-/nise-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "temp-dir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a80409e24269b0b5c2a9ffb073b07f02c73bfc38bef7ea9eefd628466f97bd0c9f644f01961eb42b541e7e95f543cdf1ab751cd7721fa283b2c7698d494ceae"
        }
      ],
      "purl": "pkg:npm/temp-dir@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/temp-dir/-/temp-dir-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/temp-dir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/temp-dir/-/temp-dir-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "generator-commonjs",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccbda27a6bcca93532066bd1b18ca6dd74e79b63cac941c1d84b2da46f5210c88c738e3a02a9c0ca0aee7232cc4d6695c9eccb9b61144c6a6f6ad99b51267c04"
        }
      ],
      "purl": "pkg:npm/generator-commonjs@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/generator-commonjs/-/generator-commonjs-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/generator-commonjs@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/generator-commonjs/-/generator-commonjs-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-generator",
      "version": "0.18.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4238e21f5c5eaac70e7befd6ca5c5d2c9b7693725cfd3db58b5a9002f8bb28269d47bb4c03ff75d245e332d9297ab77104b835247c46d3db0da168923591b93e"
        }
      ],
      "purl": "pkg:npm/yeoman-generator@0.18.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-generator/-/yeoman-generator-0.18.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-generator@0.18.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-generator/-/yeoman-generator-0.18.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yeoman-generator"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/composability.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97a4e8209228b698566a1c711f2ccaf5b9cb47a90ce232482202d28597aa2d8ee26e81e81a4760165ed6dbf22f8b84a43096062aa5bcbd2ba4d2e2948faaac4b"
        }
      ],
      "purl": "pkg:npm/async@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53795154b31296c09f8ea60f6cbc95bf5d4cf423d6e08ef6f1de9308a300389b9e11e07dffca3e792b0c9f13c90fe43e2bdd3db1d11283b0beb489281faa27d4"
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 3
          },
          {
            "location": "lib/environment.js",
            "line": 5
          },
          {
            "location": "lib/util/log.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92609ebc582146258cec7079cd33d42e5e2bf5b5454968f3eb6321aa2cc3194aead8d5ae34c432bafe2d1c7a0a247b3af4cfcc17ae2511c1dd608a1cadd59060"
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0bcbc127c0f0502c75f6f866eeeae14ee52caf8fc8c8fea5e15ccd403bfeaf21d039b5b74d34e9f7207af16a588117b66db686b99fec7bbe08a857959cc9cb66"
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c81a74e9768f84dfea42c8096e66fb440f9a79c02a8b75ecc2ca13d9cca3dcc6f169944b788be5bb38e3422a0799153dfecb935965f38e4bf05d71a9e6d4c60"
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "561ba64926c1a834cff29d992ca8f8d148c1095e3ebfc6d4484a546f82a34605a4f696ea185e111058fa2846a089d6f67ff33a0330b41261720cd19ac3d382ce"
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28a355b5dea909880f20a538729dbbdf71d6602a6995085d7592c152bc9a007a2eef6df1f854734390dff36e058fe232cae8904d1a2e6f84a72057c872ba7bd2"
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cheerio",
      "version": "0.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48308ed841af2238cfc598974fc77834d3abd7eb074cd147a776c5a6b358a88e987548997d0e7fafccfc6174210e0a650be6e97d3f3cd76eb6e2dee2a8bd01ab"
        }
      ],
      "purl": "pkg:npm/cheerio@0.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio/-/cheerio-0.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio@0.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio/-/cheerio-0.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "CSSselect",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af81d601145b43a7a719b74f0ab9776cdc9b39121c53401c04b4f26b171635345de841f6ff0f512271e451b521c1e86b045375290cfec85ba5872207df565703"
        }
      ],
      "purl": "pkg:npm/CSSselect@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/CSSselect/-/CSSselect-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/CSSselect@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/CSSselect/-/CSSselect-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "the module is now available as 'css-select'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "CSSwhat",
      "version": "0.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d4e5c606d3672b8d018337ac26f14493869fecaff314ba5313ad5035084352061bf707e9a525f6033f57a6ff0265313d1a61c5aca3472e4fd3575bbe323dfa2"
        }
      ],
      "purl": "pkg:npm/CSSwhat@0.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/CSSwhat/-/CSSwhat-0.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/CSSwhat@0.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/CSSwhat/-/CSSwhat-0.4.7.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "the module is now available as 'css-what'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6645604bf3e9c63c8931bf92da25471c4663567394b631a9d3fcecb6a2864c4f65ad9b4d1e535098bc0ffe584b30402961bcdcd3c04a331f481692a16926d6d7"
        }
      ],
      "purl": "pkg:npm/domutils@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc4bc002c158d0378792ba96051912b2681a13bc800e0a5ecf8d095058c849bfaecd28a797617a41b1b894c1011383f4ea008617a567b329266cd82eed9207cc"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7afbe2ce82ed4f9b8ca434f788a440c753664c293665d383ec04ea98bdbb409902bfc5d09862affde16ebc08c787248d040091100717181aa8cd8855d5d39d6a"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "841c448370985defab3c8b9af044deeed986dd70e7f41d1e74e13f7bdc07da72dccf1ce076ed26d1a34763ee701598af88b58b74034f253b2c6bdd9d31c5d0e5"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abd6d4c237e9ec489ff235b1c713d2ca47516406fa1a482e0464a0bef0ab848f7007bd56d8afcabefe04eb5085fe67027e75490de0d6c7f55bfee02a6c38fa51"
        }
      ],
      "purl": "pkg:npm/domhandler@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2db2ea7d7809326cbcd6dfbb735e269ee9451c9d7bd1c33a13ed2f31747d93f662670817f22e693608d3097dd23b855e52c14b57ef089e2c68adeb7053e32305"
        }
      ],
      "purl": "pkg:npm/entities@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8c7958c57f82f8e1752484cd5e61b0fc7f212cc5c57cd69a8c491e606e57dc2c21df66f6ebab2e3fa981c4fbf4791e80544f5d565793b4f02af59f761791655"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "readable-stream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 19
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7afd90cd2cd63d89b2f46baa7c856295d03839d7062de15942bab9cace91b62b85f914108995abf1364dc8072e557c904587c43be32ca01ff506e41584e26ea1"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "2.4.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29a935862ebf8581c654f99dca26628e8432cf9c76886573b3ac3d19807f1e25c4b72958eed22860444e323bccd5df675c9a8f3ab1b630d3cc9f4d5b27e4b447"
        }
      ],
      "purl": "pkg:npm/lodash@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 6
          },
          {
            "location": "lib/resolver.js",
            "line": 4
          },
          {
            "location": "lib/util/log.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "class-extend",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9c063d2e08298ae1101d120a66ccc4b6abdf916e84c16200295080abe9d112fa16a18c420cadfbd9a2abe949220f37518f7e8038455e81e372d2ecafa462d6d"
        }
      ],
      "purl": "pkg:npm/class-extend@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/class-extend/-/class-extend-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/class-extend@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/class-extend/-/class-extend-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09db0e518221e70222a33849deb2d082651381ccb3170659aea8642a13833281ad3ca33ec2dd21d02348a1ab8958cb12f7cdb611dccfb05ffa99be272ef3cde6"
        }
      ],
      "purl": "pkg:npm/object-assign@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d435f7defb1f77474ffde3477e26b74897c491399754baf970d07c6347fd0650a1af2445a24cae6bc6d28db4fd6580c9e847cdfcdead28ad203a937789fb2e0"
        }
      ],
      "purl": "pkg:npm/cross-spawn@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-0.2.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a989b589eb4737020033f1ada2604ac3adc4f60bb3a62a7b168487073a39141c58e45e770986d2f1352a949b147146e9e96f923c569addeda35277636d92c25"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dargs",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c30f8dd79ce4c8fd68da490be4e6e189796941ede7a574b02a289a46fd3a826ecff37a168d621f3b754f33fb25a7bd348883df50825c7c6a2edea39acc7ef67"
        }
      ],
      "purl": "pkg:npm/dargs@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dargs/-/dargs-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dargs@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dargs/-/dargs-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "1.0.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6c1517c00266c7748b6cf9e2a347d91826817456208c557f72a8bbb903b4bfbfe9ddd3beca80221338c8a2ae6c8206266928b0d76c13a4626eadbbbad7fd32a"
        }
      ],
      "purl": "pkg:npm/dateformat@1.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.12.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/dateformat"
        },
        {
          "name": "cdx:npm:bin",
          "value": "dateformat"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "dateformat"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "179690332c302769fce6ce2124f4d3f513f11a6b9ba27b81d7430d628d7bff1a61d7be27d8c211df71d182e87355a835d0efe7a4ced23e4ef72cc64d3fe15a5b"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cd77066cd2c9119693e90942b6e52b42e151feb4fe4681e6351d038e18ffa5436c6d76437656d4ffe6d897f64dc85a99013d5f5bdcbb005979f81868bf3eb48"
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c0fd9fc31111caaa810eae9faa7862b0d5096f1109066527345da63a5674f166bf8abf51b9cc5c2db698eff2ac59fec04f4f89ed87065a01cb0065326548a5d"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cb22c473255050bbbda678028f91640e2dcba37574f7da1c1d7e7908d5fad289244c2b53287e32877fe304c74481e9f8c41572fc7c10efd5d2b298194ea7843"
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loud-rejection",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44f36589938592a16e98386f62a39a358e14cfda093362bdb42e895ac249b0d761b8e356e0b407441a5bd2a7f8a4902955f7c8e4ddfd4b0cd6649b8485f77b79"
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loud-rejection@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdf2138e08c6539d2f8d0e051fa794a18bbe894a142885f0b3684bd79249a4847e05b4f169742c32ebb28ed361d96aac4814b99ec6991c5b0579ccb0e420809e"
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/currently-unhandled@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-find-index",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3351d0c885dc046b55cb006df1655d8a6fa5acd68aed51e9f7d42de6948dce25f39ca1d588805b5d6b5f453a4416917f73815d7f1340b020b03e9e69841609b7"
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-find-index@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.22.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c1a6eb98b98e6316c962fc922cd6895dc3a7ce402062a2886a59983fda189a3b26d739fb789689eff39b8338a5dd7fcae1c8ad79f5cc54e5c0dc2bf34a93ccf"
        }
      ],
      "purl": "pkg:npm/resolve@1.22.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4518f196f2c3903d582700dbae804731bf9cba4bab90358dc87c7b0f7a0d079c7dadbe6881c92c302e701c269d717a28ebb815afffb7185c92877d77e338baaf"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aebf955525ed4613b83876d7522005ef15b7068f43bae17a0b98c7faaff1d798f68e78b272029bc54d3d1ebd16aa548b52ce22e25b47197a937bb547725616c8"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "583f4c4e536d239e48c18512dbb88787db4add8a08561c62b3cc8a84ba53a96b6697bdfdb9773d3564e9c681e47d97f7f839020ac5e8c7de3f5566678ae666e8"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ef1254a3caea3810c406a13c28d6e254e6940cc135b9952d71d39cf37c9b932322d1df3c0edbb2d8af1360f9d96f2a918eb86cbf33305d5e1f34834bdee7e1c"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "find-up"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9396db8aba1b4d78524a6b53e24737cb014e75f36ab5cb811be17089dcf06acb3103900651cc1aca28172debcda5b3dade0551dff6e7582cde4d77e2b507d05"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d069e2e83e1470b4dbbfd739ec37f10c676be355df8148ea599bb8f767f47081abd7acc3534e8158ffd1004bceba8ec243408d8c768b94ce7d6092459b735697"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32752e1327007a6b5269e1528d7296fdaae857b6a405b63e4aff91932a858e001eef717e311d130562814439267d6abf1e216675abdf6751bb87848f6576824a"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec11b0447aade2cfee55bbb2a1e7a3467e189859d8662165e00b9a7971e58197f7b0e345d12386971b363f0f20ea108aba9a34f1169f20ee585c534e2937f0b1"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732ed974d45775a6e591760d234e3da6d85579716ead1c9bf7e840fdd6737ab674a464f1e36cfecbeb2cc4169557697bd2dd66baae4874a867e14b5ca06518f4"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "411fc619a282921c24d5e3d03580d12986779b053dca9b0a841d17c859cb41da26c84aa4ddef30a56dd5e49a7cf336f12b89f9493d67aa8fa0f63b93a68c2785"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b8784349cf5a648909fd667bf7dd0f9d79338a99b97e8e3d4597eaa23ffbd87b38fe4bcc7e277528d084abc7f42812f22539a0d62613da45dd5f949f475d9aa"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redent",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aad5b984acc6419a8aa21e893520fee257e2b5f3ca1b3e367ba43089198f3399a62ad474378d406c9458bb4c498bb9e1389e160e04642af024eadc38588c11e2"
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redent@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6aac031564a04a07d1684c1aa39960e4a11c55dff66be0f5aefa06ecd762966633d0dc1193a4ad5a959dcff1e9937e0c28fa71eecf17c54aa299f7102ba80696"
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66ab5232e5726e4212a36396beabe6ee21d25a782f75a5b7229b13f7fb8ff2fe20322e7dd4b63a877e7074e7ef41d5822855995a6d98d4ea69e2457bbd0293e8"
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71dc8cb6a5ff04eaaa3410622a5215932b4d1e6e3d32d3256329f5cf1cef24a5a614c946ce6fabcb90417d8c9e63d62634a6d14a8fe8ece5fdc3d6a57b4c20df"
        }
      ],
      "purl": "pkg:npm/is-finite@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-finite/-/is-finite-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-indent",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "239890aba68530ceb67c1100201fe15f3c090fa104674c441825f6b7ba17a9a28f21182de16aee010dbce4121281d90ff872c65b278698d25ca48c0579161150"
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/strip-indent"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-indent"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-newlines",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "366e1c17bf458524f3acb2860cc8b7238bad06d16ff2a2b2e2cab57a77ed7f680c769a88f285504c07f24a44f3e6be3d8225730e3f3c4956573f809e610c236b"
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-conflict",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "003d5001100a37de5a22a3a6a1bf8786972d613cc26e95c6d4d7dcfb1af1961de3e786067758a4206aac1881c007b1e3a26cfc899cb4b08e0cb73b3aea41fc0e"
        }
      ],
      "purl": "pkg:npm/detect-conflict@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-conflict/-/detect-conflict-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-conflict@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-conflict/-/detect-conflict-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57355ce3684c65b614f52c7f96d6fb298b90ea9a80c3e71b156572e1729d92e10bd8215a44b1849c848fb3b61dcda506a62f82a48aaf466bbb84f4384fb110e7"
        }
      ],
      "purl": "pkg:npm/diff@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 2
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "download",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeaa5084e7bc12041376bf9e009d2cf825bddacd2c3ad30661a742662991d205f38c23c1a903f23f321de31f910865f3ea7c99941a349d7e2834b8d0961713df"
        }
      ],
      "purl": "pkg:npm/download@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/download/-/download-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/download@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/download/-/download-3.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/download"
        },
        {
          "name": "cdx:npm:bin",
          "value": "download"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fda0831066ad1af67604893e1e62dfe227c2245c2f28535bf7f25e64f32e95f805ada727f5015c01fe463bc07f9b07948d2a1b952e489f471686aa5fb3fe4f40"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-tar",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a06b510c1e8c8c5029a3ce90e6ac3c136906020667db86718a868117068580d795e723a468aaa1a42e16e0e819c4a6aa6b1ad96b5ce815a773f5821560b7699e"
        }
      ],
      "purl": "pkg:npm/decompress-tar@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-tar/-/decompress-tar-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-tar@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-tar/-/decompress-tar-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-tar",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2c47ad376d2e803cac5c7644357b9ac00bd2430b13373a56c62435afe5a8e11ea221e9c4daa9ca5e393721d6221e1d86389c71054e098288648b7ef98e0c7e3"
        }
      ],
      "purl": "pkg:npm/is-tar@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-tar/-/is-tar-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-tar@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-tar/-/is-tar-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-dirs",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85640b8d84c0ea50dee76712f65b28fe4de545eee98dd2cc7e51c515e6015f5b77c418b431e35407b4b77aae15a986603bc51822d0e3cf48de78ca7be9053f92"
        }
      ],
      "purl": "pkg:npm/strip-dirs@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-dirs/-/strip-dirs-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-dirs@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-dirs/-/strip-dirs-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/strip-dirs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-dirs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "0.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c8280e7884ff22661c834fcd533ac26242f475816f996125c5699500be80f8c021dd6c763669cb66a53138c77e3866516a1dbbe8c4a39a11250b4d937682cb6"
        }
      ],
      "purl": "pkg:npm/chalk@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "chalk"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 3
          },
          {
            "location": "lib/environment.js",
            "line": 5
          },
          {
            "location": "lib/util/log.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f63ca52437942782249e9a8c1ae8cae4f4c3c276d1623929a26e367e8f5aa12c61c762ca99c2604c445dc844c557a3cb326c3ab1d9f265d9dffc3a9841a1690"
        }
      ],
      "purl": "pkg:npm/ansi-styles@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d58b138357e4dbfe894e8421b59900acc92eaeaf14a1653541ed1a4775541e38228f89ceca54962d602d057a19e3f7573a6ba07cb1a6d5cf9086e0f427279d14"
        }
      ],
      "purl": "pkg:npm/has-ansi@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/strip-dirs/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "has-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download-status/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/yeoman-assert/node_modules/.bin/has-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b06c0818c8e161d5b6ebf221c0ada0916588f0344254eeae8f78588074fecc3f902f5a5adfbb4cdee8e1c9f70921849bb31a7b1b1872ef3ad15bfd401e6e0198"
        }
      ],
      "purl": "pkg:npm/ansi-regex@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0deae164bee3ea2ebf9c49d51b4a9588a5c8d0e2a8bafbe9b0089a8fb73e2dfa99659c5dc19b6ff3e52203fc385542694fc5335f4a51d5d7073a28b519b9abb9"
        }
      ],
      "purl": "pkg:npm/strip-ansi@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/strip-dirs/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download-status/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/yeoman-assert/node_modules/.bin/strip-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5d099dbc32733b93b7090c973b12af3403d0ac445000399532e359e93990acfbea928df232ee8e51878e82064f8393915b289df75f74ea83862b574ecde5168"
        }
      ],
      "purl": "pkg:npm/supports-color@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/strip-dirs/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:bin",
          "value": "supports-color"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download-status/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/yeoman-assert/node_modules/.bin/supports-color"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e9024f80dcd5062ff3b8377a701b52dddcf0ea3b14e4b8003f1e8547c2eb57b2a5bfa9871ce184a071c1693e583fa9b361677df26c58498db26a45986bca895"
        }
      ],
      "purl": "pkg:npm/get-stdin@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e2f7f6529f83456a91bc44ff7c88d3cc39e695de65cf8acc4ac732ad1d5aabde0e7a8ff7c19fec999a7c5254003c96665b97627d6ff6b8909bdf53786a41880"
        }
      ],
      "purl": "pkg:npm/is-absolute@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c013abfab34ce2090066aa0b4492389b2c395b3cc8750a2c14001b9ef7d73f9cf52f2ce0008de2bce29e842e4a7ea950259a22855862ae0b42063dfbf0483c18"
        }
      ],
      "purl": "pkg:npm/is-relative@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-integer",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44f41cfecf720474afa62fa1b3d758889d9cb85794eb1dd3cb2229f0ed87e9228496d22f24ecd18fd4e8caf712b43bcf47fa52e2bc60af5a0115a8d08d9d92ce"
        }
      ],
      "purl": "pkg:npm/is-integer@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-integer/-/is-integer-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-integer@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-integer/-/is-integer-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-stream",
      "version": "0.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3f036886968ca757c43471be377b3f9a2b53c4616b9e52be323eb7a76f038947763add58da20f22b6af581e95718033e2341fcebe132d7f22dffb43864ccf47"
        }
      ],
      "purl": "pkg:npm/tar-stream@0.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-stream/-/tar-stream-0.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@0.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-stream/-/tar-stream-0.4.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "0.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e3942b3c5cb0482bb2c20a14d67f35ae200c64a6698b5dc2fbfe2802a1f153d41d37f52cf420f9c09a8b0de5068edb6954e2aafc2dc533da88d4944ea92e445"
        }
      ],
      "purl": "pkg:npm/bl@0.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-0.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@0.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-0.9.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24d6a54226e464366bde6d88a4963c4903f504b0ac0b9769c8d4e99aa80bb8fd413e874c0a087a24e1790bfe0be2dfd39a717bf0e7d44950e15490389bdab1e"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "readable-stream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 19
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4642bf0821127532906477662880a28dd28ab024551ece4ab0b67aa40080985ff518f5108689c749758d11172dc44a7b466be374d6d94cbe73f55ee74825ca72"
        }
      ],
      "purl": "pkg:npm/through2@0.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a66cdae0ce55035e473889884185a1a171a518d69f0a6d102b90690545e4cf3130ad1c4aa81b1b0214df913db331c261517d46d46922774c5a57c5a33a5ec3b0"
        }
      ],
      "purl": "pkg:npm/vinyl@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83ada7dca6fd72ccde66f9af054a8ffddb04243ffef34a4303cbbc2aa1e700fad59d0d897bdad557aa29c6486e5827759029f680e89bcc32b10ad06f0f7ab990"
        }
      ],
      "purl": "pkg:npm/clone@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76152a739ee048c0a8e935fce452df7b9d5e0bfb3e226d8c2e40202707da4517b1476b40e1d77778b116e0be9e7f31dcda2368aeb4515c84e27e70cb951ae168"
        }
      ],
      "purl": "pkg:npm/clone-stats@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-tarbz2",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "163f7b1c3a41d9c33b35787a2324d3ea239fa9ec2bfda358dc7ca8fa7e441a0fdae299f3901b5b664c5aa9e335d391cf44b37a7dfb2bc0a953ae68491f606619"
        }
      ],
      "purl": "pkg:npm/decompress-tarbz2@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-tarbz2/-/decompress-tarbz2-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-tarbz2@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-tarbz2/-/decompress-tarbz2-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-bzip2",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf90c0f73feb9a4e14749b5bdcdd6362a8ef080e6ba1155fe50eafa6b1ce705e94ffdf1398027f02f6cf7913043985835b878caffa498f91677ded13db02f506"
        }
      ],
      "purl": "pkg:npm/is-bzip2@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-bzip2/-/is-bzip2-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-bzip2@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-bzip2/-/is-bzip2-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "seek-bzip",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b542d3f760be6d5b0c3cb8a68e090d7c531213da568d0571e357f4b65980a22b8b9d8aff25906f3d2912280a351a827026081bab8c5e331155f607205b9c28d"
        }
      ],
      "purl": "pkg:npm/seek-bzip@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/seek-bzip/-/seek-bzip-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/seek-bzip@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/seek-bzip/-/seek-bzip-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/seek-bunzip, /app/test/fixtures/lookup-project/node_modules/.bin/seek-table"
        },
        {
          "name": "cdx:npm:bin",
          "value": "seek-bunzip, seek-table"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-targz",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db8123592dcb9ea169b5964ee775ecfae76ef4160fcf5ea4b8c9476e55f15924a2e58f6b5b9814ec917a6aae6e406c693f58a163db0aabe610dc6fc432f37edd"
        }
      ],
      "purl": "pkg:npm/decompress-targz@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-targz/-/decompress-targz-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-targz@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-targz/-/decompress-targz-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-gzip",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "adc7c02d121bd587b0b6792c7d120719c218f774272bc04843fd9cf720d8706fd8ebebd1a09b935819a64846f22cb62d5e6eeadf9a473876d915005a2eb86559"
        }
      ],
      "purl": "pkg:npm/is-gzip@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-gzip/-/is-gzip-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-gzip@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-gzip/-/is-gzip-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-dirs",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb442f3944c8b37c4cae274aada400512229fe4abb151b7f4237af078d3e53aa897deb8fa530d010d1557c06df669e7d1a9264c58fb231d8d1e5c80a672476be"
        }
      ],
      "purl": "pkg:npm/strip-dirs@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-dirs/-/strip-dirs-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-dirs@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-dirs/-/strip-dirs-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/decompress-targz/node_modules/.bin/strip-dirs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-dirs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/decompress-unzip/node_modules/.bin/strip-dirs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-natural-number",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3c806fc5babe7ff1192107a5289ea3aec107cd26fb9a0d2b56ffeafaa0807f84e40f5107bb0e288342ad1f8ad18e9c046dfa6425fd2eab83a564bbe8b4b00e3"
        }
      ],
      "purl": "pkg:npm/is-natural-number@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-natural-number/-/is-natural-number-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-natural-number@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-natural-number/-/is-natural-number-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sum-up",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf0e4ff209e18aaa24254591751e85e242082247b4fae6d0486c98518e74e8609b256b55ec5e97bb2d23e92d76e5e497da817e6bc29d8afb19f0f955107d0c73"
        }
      ],
      "purl": "pkg:npm/sum-up@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sum-up/-/sum-up-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sum-up@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sum-up/-/sum-up-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af34b485e88d7fc5e7eff9a975255548c016028cbd6df6f558e4d80bbf19d1440a78a6bf0964bc14eab494a18d6bc0d62809fd8318c2bcc2d87393c65d894ad8"
        }
      ],
      "purl": "pkg:npm/tar-stream@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-stream/-/tar-stream-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-stream/-/tar-stream-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6f70da5ad1453af544f7e35acee80632e05540224507b995d12166eafb31e7b15711cc30e3200846bae6288b477ffdcc08c2db78a64a4ac9c5847e3755fafc3"
        }
      ],
      "purl": "pkg:npm/bl@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "085b074208ed5b550285d5e06f2246b679be3bfb8b41e65db5b0e8f267d48185c21d2335c20ad5c579ba6d2cab52e12b11bfb8b185460b3012051a2def3caba3"
        }
      ],
      "purl": "pkg:npm/buffer-alloc@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-alloc/-/buffer-alloc-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-alloc/-/buffer-alloc-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc-unsafe",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c433688c20441d276ca33c9a1222c95d9e5795680935a16dc305553293238bb04b0598473d927f921453f3fa0979e0a40dc650e7030097a2c392f4e931db102"
        }
      ],
      "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-fill",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fbcdec4d0708a26823860e0f71357f4f0668ebb9b6e546410dba9b6bcae23ae144645c316e9bd8a5fc918bf0b9bcc187c05e9ade7555d7673ede3078a58a689"
        }
      ],
      "purl": "pkg:npm/buffer-fill@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-fill/-/buffer-fill-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-fill@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-fill/-/buffer-fill-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-constants",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cba380c284887fb1728cc22ff78bbe6f9add85e6448f347adc64f26499b9aa1e018bed988302c2708fdf3c56642f93d28b13ade9934a9bec3e1dfa7f05c8b0a3"
        }
      ],
      "purl": "pkg:npm/fs-constants@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-constants@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-buffer",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "971f41e62bfb9acb85604dddcad4fe284e6d6a9fab358c3e2b88d591bf51fdab006fea5b052335ee3b6e9c7a658417ba45125d671dcf9f6269876e0edf698e56"
        }
      ],
      "purl": "pkg:npm/to-buffer@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-buffer@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-unzip",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd490f76d38eeaf2f5a0d1cb6d2e8a8c6603a408965681f763fb82832055de9eba4f73b6ca9d861c9ee49a2a77aa62e29a9926cc4d98234e22c64b8bf5028296"
        }
      ],
      "purl": "pkg:npm/decompress-unzip@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-unzip/-/decompress-unzip-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-unzip@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-unzip/-/decompress-unzip-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-zip",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b29bf74ba87655316ffe6db36b03f7937964f25b87c4ea4a0b4a8152b0cd86177fe9868eda3c27261c55852efcc7bbb303b9febb7689989f7e860f053f70991"
        }
      ],
      "purl": "pkg:npm/is-zip@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-zip/-/is-zip-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-zip@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-zip/-/is-zip-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a786bd23a5fa9eee888681a606a01c6c9cb59a50b88f6eef10f657f45e0be3fbd94f72f2ab5564147c3f57f3d4701f41ba8f831b7887913d31dd0c9ae7ccdcde"
        }
      ],
      "purl": "pkg:npm/yauzl@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54ef47b7ffa9dd237b48a5aa72b804ce319b4522584f1f90d694d00b4c2b5aa1f1d2fa49ada43a1ad1f1f2dbdc835ae52b56f2854e6071cc603a08fb0744c391"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fd-slicer",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "704d6ab01fd5c32428cd9faad5d1b147c2c160d65ea1f84475434648c6d00f71b0da50335fd65bdee214e846dcfc59b28e8f405967e79f4014087aad7afb3ff2"
        }
      ],
      "purl": "pkg:npm/fd-slicer@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fd-slicer@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1776acbf8d94b97721773b7ec57a9f5b538695505efa6c5ada6a88d29839c801d93ef16663763a76b49ffc643503ce9681610df4ace1fd6ae029aea219c1d72e"
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "download-status",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4648f518e7d19b44b709c8d8eb8a9a825aa1aac38435ca50bf42fd6f8ecec16643b1061129ac1b44e1adc496f4a269abd564a1e90b07c3305d140252d616118"
        }
      ],
      "purl": "pkg:npm/download-status@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/download-status/-/download-status-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/download-status@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/download-status/-/download-status-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lpad-align",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30c21c166991f7394666d05c14ea30b3a73608e31e907088149cf77b0feb469299d704789970cfcef715a8b6abbb1f0cdf75f84cf4aad89770f16263d2ad0a6d"
        }
      ],
      "purl": "pkg:npm/lpad-align@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lpad-align/-/lpad-align-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lpad-align@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lpad-align/-/lpad-align-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/lpad-align"
        },
        {
          "name": "cdx:npm:bin",
          "value": "lpad-align"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "longest",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93ecade67de5e3c254e24f1fb67286e95eeedf6c321f635f2b378cb68f45fd0444d1a9b1cbf2dacb1c25be38e4644233a91fb5f48aed14ef29e6407d41a61416"
        }
      ],
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/longest@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51d03c989e3078891404edb6e2d21aac7cee1ece07b98889becb864fb8ff48f42250956362f3430483dad21028addb8e7e31a8841fea1d645afe5aeb597fe65f"
        }
      ],
      "purl": "pkg:npm/progress@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "each-async",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d21246b9bf7ab24c2bfac5288efef343491cf62e239f74b02e22e4f09afb283cfb69a68cce4379517ddaffd661cc2d0e7d95725c78651dc8c2d0a54e88a67e1d"
        }
      ],
      "purl": "pkg:npm/each-async@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/each-async/-/each-async-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/each-async@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/each-async/-/each-async-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "199fa0e236b232acc244c801daca25ec68822e329f4b53c83648e6c7cb2970a71ed4b895a9c6d0ade5f0aacd980055c2e91d375481b6f194b7d6df0cf3aeafe8"
        }
      ],
      "purl": "pkg:npm/onetime@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-immediate-shim",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e2e403aaad9582540da7e64af2cc49aa6a2e9b29222fa73e685091cf563ebe76c6c3dd7d62c6db18e6d127b1a3691f7a45007986f1e20752bb44b6886b83e51"
        }
      ],
      "purl": "pkg:npm/set-immediate-shim@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-immediate-shim@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-rename",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b30cdb2066ff6ab12814af3db4f639f2f8373a4d5bc3e777e4f7d43705aa768eca3388e49ae180efc2620cda91f8979915a79e1e7460f4deda8a15f760f9acca"
        }
      ],
      "purl": "pkg:npm/gulp-rename@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-rename@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d77f1be9fad24c876b04e78039e9f49e61dcbfade4e7491ec1ac128b2238f87fffa62403a570d4feb995f2f4f5ae1ae55a574f99376cee53b9fc31d09445512"
        }
      ],
      "purl": "pkg:npm/meow@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/meow/-/meow-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/meow@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/meow/-/meow-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8703582938c94e50da6e3269db19f487c6d198ea4e6ef5d58186d0991f97a1bfc47810ed61e6b7c6db63af986a896a8b5ad237ffac4eef1d59024b50f6ea7e6a"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2"
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "675bea7fa9430b77f8376996a91cb063aa1d8d16ad3cd18366052be0363d30b0b5e3e169dbfcbe088fd19cd1a56fc843e9c92c704ffc0e5654c0751a88306c86"
        }
      ],
      "purl": "pkg:npm/indent-string@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indent-string/-/indent-string-1.2.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download/node_modules/.bin/indent-string"
        },
        {
          "name": "cdx:npm:bin",
          "value": "indent-string"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "361df424b78c1dda08f80b10e5e6e5859ed8953b0cf7088941efc01c8ba794adca5b3bd78576f7e8827b2b520e7918c83adccc8dd5078f05d4171289a0f4d23a"
        }
      ],
      "purl": "pkg:npm/repeating@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeating/-/repeating-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeating@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeating/-/repeating-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download/node_modules/.bin/repeating"
        },
        {
          "name": "cdx:npm:bin",
          "value": "repeating"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "0.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42492e247257edf87b9c214b3c867d87f136fd5f5950b807dc6b10b52d4dd996c762646da7e644dfb981efd66515afc0334ce813caa3cd3a5ebbc4707abd34ba"
        }
      ],
      "purl": "pkg:npm/rc@0.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rc/-/rc-0.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@0.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-0.5.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download/node_modules/.bin/rc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7637ee2284eed8832749394238ec8e86757a4e349fa351999879336289f00b68476e8828dad6629cab7b6e4a9d11840f6631fc5d30ddd8b24a7007ba6e300b7"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a8b644efc5cf93c0e9b921e8a6f159d236f0838c22bd4bc1b7b1c279d19b61b294b16bb8f1e748e485876eb80b408ef7c35304a03b07fcf887fdf4094e121cb"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77644fb6b90bb3c4eeac51402215bc21d334f9c3aaf901444d60462873bef77799e19b783f509e241e4b1ca5b811f13069b1293cbf3f5133b7417f78fa5ab1c1"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/download/node_modules/.bin/strip-json-comments"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-json-comments"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3665af3e7c7417549fad06d8c0e8bb39e68d1a8929f57873362a09fc2481b3c41ae2fc6e83cd66849100559c315ee066601e4a0d17ccabf177451d01214eec5a"
        }
      ],
      "purl": "pkg:npm/aws4@1.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad157ecd00fcb55172b36ea500647d594b92e225009e025270cf994522adbe5e6d29e676b796ef74d15d347056f45591e20b861e5826b19d46ec14a6db04dbb8"
        }
      ],
      "purl": "pkg:npm/punycode@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "psl",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13f66c754e072ecffaf206338064e43227164cb3dd01fb492df24594b50000a646912b4d53bdac6634fae929cc0d539f39663f600a220fb2716bd887be781c6a"
        }
      ],
      "purl": "pkg:npm/psl@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/psl/-/psl-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/psl@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/psl/-/psl-1.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb21ccaa02d80f340370090bfad8c90c2e6748db8d231d2f66d4597a23e1ed269e7fb5475fd1f92239fd976548a25db368d6256045fa2b2b93ff6dfb039f2a11"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ed0fa606dfbd190888bff464da24a431593643d38e7ee11e214e4ff1d54ca8a9a77227dc7d0a04a2d519550d017c536b312cb4a716409a32286a9631c85a032"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-regex",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87f185c3e87d61b6e5b9076b60a1de180208c0ac3606ea296ad4e508d159ba4c354ee276fb8e32f2f87a493f53e9fb750cb5b49c09c110ad851e7c570807396b"
        }
      ],
      "purl": "pkg:npm/url-regex@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-regex/-/url-regex-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-regex@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-regex/-/url-regex-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip-regex",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e3a421d3bb16d1ffa8d626ba1cfd537e9e9a398f44f856fd93008e6a7441d0c7b86c2fbebb31e71c1854ac2ed17af7812264a4d212a828794e83b4614272ea9"
        }
      ],
      "purl": "pkg:npm/ip-regex@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip-regex/-/ip-regex-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip-regex@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip-regex/-/ip-regex-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-fs",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f424ca8edf37efc9e17727701434f0cb02a2a349fc6aaabac40ef4834bb2a5c9d33520a8c3f8103b0bf42fd13619a29dec443791997f7620713d20a07015c44b"
        }
      ],
      "purl": "pkg:npm/vinyl-fs@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-fs@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "785b9a2e8cbf4716a5bf692bfa5a8c9549eb0d657ede3e299633882602c8848d39f0841f589eef5e1c84207bbe1ed0bbdfc9251802d8c4e2833b46d03f7b60f0"
        }
      ],
      "purl": "pkg:npm/defaults@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-stream",
      "version": "3.1.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a301ed94c3172006f12e385400ed07856d7f4c1ee45740300ddb88dc12db62c582691ccd21c2c1bbc374c0765fb7665ad920a651708439da59cc2ee4fc7d7d7a"
        }
      ],
      "purl": "pkg:npm/glob-stream@3.1.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-stream@3.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "234ad359429264ac4f4880086aa8525d333f0e2208eb06a67beac40b77050392ea9abf5899d2fbcfa1e3f7e6dd5ad4efa18d52bb8fce88c2e66f7ed8ec9cef25"
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d0a3aa35a9254b1166b0de5f9bc180365f4b8bb8ad8a8cd876c2380eed0ffd5099d7af5437c90291f01234fc1b7facf83be5ee92316e215bfe9c0475536548c"
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "ImportedModules",
          "value": "minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob2base",
      "version": "0.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672aa5828c0c6df8f634f8f169967f12db1794e721dbc1515e031deb8bea6569356d3f7ec2f4912d80f5a26f4ced07d0aeee75cc93c04f5eea5e6e3fcddfbd40"
        }
      ],
      "purl": "pkg:npm/glob2base@0.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob2base@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-index",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b89e6f5ab7c128c704eb2d99f3cdf87701198fd98d1b161adeddc8e773b015eb99f03f68736139cdcb2b92e857ea1e2262b8e18afd13deccd09b194057dbb10e"
        }
      ],
      "purl": "pkg:npm/find-index@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-index@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ordered-read-streams",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3cc5f97a188dae2e3e96093d7e5d3dc6e3de7221a6c8fc95512070c0f4f80bfdc41c6c6855fed476028313748b043e295039a5ceb8352f570ae6282ba7e4f2bb"
        }
      ],
      "purl": "pkg:npm/ordered-read-streams@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ordered-read-streams@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fc28ce93769b28064e932535debdb9a9b9bddb0134b4e999eedc171f54f550905b6787530578267780528241c8e2edfed86228a0b0ee4e47df6faa1a0d4fc9d"
        }
      ],
      "purl": "pkg:npm/unique-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-watcher",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "973616ab50492c19ad6fdaf34fafa581b165116e9273b07e42cdd19ac340f656dd152a8b1e179b7f2a4f4779db10e31e110c9ac155ea4831f46aa8ed22695da3"
        }
      ],
      "purl": "pkg:npm/glob-watcher@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-watcher@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gaze",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc859b5c69030c7157f3322535d7e79a1be548c86904eead0ebe089c1f1f1a4bba761fe08c53c636a71db1725a8d9834e71f634735db2fa8029c29ee31aa78b7"
        }
      ],
      "purl": "pkg:npm/gaze@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gaze@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globule",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dde21c0363a33c29b856fc08c193f3231095b2c03c1d2a4cd82e9cea42b9b9f247e051b05a8caa2f7227d7dbae5f8a1ef93c07df0d8fd67403996e7a89e84ee0"
        }
      ],
      "purl": "pkg:npm/globule@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globule@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.1.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00d872d95dbeb45a516a3137c0de03864350d3c283af422bd6a2f5dbf7147b9f9aed24c42bc8e45b8a27518b98f3fd3aa8016e4f98deee68c0ab3c7478a236b5"
        }
      ],
      "purl": "pkg:npm/glob@3.1.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.1.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "025ebba1ab5b452a37455e6146a228967e98e723156c94889f88c424d2fb542226ceafe42ebeefbdbeac151257aabf2ba4773fda424e33ecb4b0f28de3b55dcc"
        }
      ],
      "purl": "pkg:npm/inherits@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc"
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "ImportedModules",
          "value": "minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/transform.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2"
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d154840d579cfcc7b67804eea2241df088f204c317d1f6a1a1bf1827de95d60a36463bc29359b51b19ad7d79fc44d49a2da4eda29edfb2e861bbda0b93785480"
        }
      ],
      "purl": "pkg:npm/lodash@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 6
          },
          {
            "location": "lib/resolver.js",
            "line": 4
          },
          {
            "location": "lib/util/log.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9501e0088db94a0e9ffc09dd2d25dc697b722afc7a2823b127f7c6a511a31bcf859e765adc8f7588ef6743412af38915b9210d33781a37257b264bc45c4bd8e"
        }
      ],
      "purl": "pkg:npm/strip-bom@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/vinyl-fs/node_modules/.bin/strip-bom"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-bom"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02b462e5ac6ebfaea012cca5dd4b8af340b35bbb79ea17a6ef7606358c4d59318d28525469d49bf46bbd4878a3604522f2e95031fd5b2689983704823c786d4d"
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ware",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6361d40cc92dae2526f924768195b196bb33720b5713196141867c4093586e5db68ee9b4d0a21470727f87fb1d0178564c971b4a488c60df59dad59b5984abaf"
        }
      ],
      "purl": "pkg:npm/ware@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ware/-/ware-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ware@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ware/-/ware-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-fn",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c432dd1b1d0cf09430f500c00bdb39354c6d83d308d3d17a55bc5ad8b6284a80afcc99f1da7f3560c21fca4997106b14bee2dac676e5253ce148e8d4397dfb6a"
        }
      ],
      "purl": "pkg:npm/wrap-fn@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-fn/-/wrap-fn-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-fn@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-fn/-/wrap-fn-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "090b2309188d39b23c02d4ec34804344c438a0c47cdc2cc4b301d86a10a5bee97b80a93e94342238abfee6a87b2d059fe6c87a8e464d8aca73fd096c671c8d80"
        }
      ],
      "purl": "pkg:npm/co@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/co/-/co-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-utils",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27cb8cac406f24b0f57f9a745f2ba24765ea5087356f105d02705672b073ac42327618d6ac7202a6f7499a5a6fcf601b8a300d00db949c2e3f43e075c0aa5835"
        }
      ],
      "purl": "pkg:npm/file-utils@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-utils/-/file-utils-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-utils@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-utils/-/file-utils-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "baff1ad1ecec8c04fdf7391226c26dc75b1cc9e7ba8d2da20b84f9d27e8c700b9da590f9ac7b06b1dbe03be91def7852877bff6625bff1d0df2dbda9f72c69b7"
        }
      ],
      "purl": "pkg:npm/findup-sync@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90eab59dc53252f919765ec180a6b79facc03a2374e69ce578ec444ae73c6c5a17291858b2b64ceb3efd3b90ca7bd2460a11e149996852c0ff859ad45c1cb181"
        }
      ],
      "purl": "pkg:npm/glob@4.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isbinaryfile",
      "version": "2.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43146b2b5f4b5f4377fc42c2fab678eecf3b6734359337a02201ac1ea04770d553d58b7e4ccb2566e92121ed644a672eb083a6f4077e4b16b1b7c871a74736d4"
        }
      ],
      "purl": "pkg:npm/isbinaryfile@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isbinaryfile@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-2.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "isbinaryfile"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3"
        }
      ],
      "purl": "pkg:npm/rimraf@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "github-username",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34660f6896c107fa422d19ed123d714c836d62d3261e729b1b2347b510b2bed765f5c9d62ffad59ce62d97be323e5b233c6d51ebd15ad95dd68042cd11067971"
        }
      ],
      "purl": "pkg:npm/github-username@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/github-username/-/github-username-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/github-username@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/github-username/-/github-username-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/github-username"
        },
        {
          "name": "cdx:npm:bin",
          "value": "github-username"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "783cf8013d63275f65ad3e1f97edd3c545238b3aaa466bf1e127bd31d62ead05a04e21d8f2f71b6daddb0cd984a40e000af2f39964f5130ba4f331e98c36a591"
        }
      ],
      "purl": "pkg:npm/get-stdin@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "2.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3de8e4fe0ae3621a004f8322896a60e3fb57a73123a18ebce134c354c42282389d25448872ca8356536627eb84672abc68c7c7cc999cd09919eba16a888ea52f"
        }
      ],
      "purl": "pkg:npm/got@2.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-2.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@2.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-2.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexify",
      "version": "3.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3bcfcbafdb03324b9d642a10f52ac757260e5643ab7ddd19dea91c541e7b245d5b6561890ba8cd20a92b50677a63d3bde0ebcee33c21eba8d7c2cdac0b621e6"
        }
      ],
      "purl": "pkg:npm/duplexify@3.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexify/-/duplexify-3.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexify@3.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexify/-/duplexify-3.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-shift",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0228aca05a90d2f6c67198103d8d5c74fd88efa82569503f45ab984781b8b613458244eaafdd325d3a382d85fad0997eb0894f3471dd192c28d3502f6ca51255"
        }
      ],
      "purl": "pkg:npm/stream-shift@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-shift@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "infinity-agent",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a77d425ee68d92f5a01059718c843648e142f7f4c00957782e3937c71c8768b38b6e547925d63fc9fb55cb427f822c8bea72981047fa7ec57617cdcae109ee7"
        }
      ],
      "purl": "pkg:npm/infinity-agent@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/infinity-agent/-/infinity-agent-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/infinity-agent@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/infinity-agent/-/infinity-agent-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b903e6f2472ce3b8f1dfc6ad01c593571ca5b506283d3ebccbd69661d57ac965d2c96f26cd26add132fa0a259d65e09d1772ab02fa55b671db4efe1137eaea75"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nested-error-stacks",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a37d9a9e9f4903ba1eccf38549f1b60415d27477a93a6e45a49bf0c47583b5f277060df1762ebc4ba8a33e510e7d483aaaec595b2bc933ef1f1e4d723032aca4"
        }
      ],
      "purl": "pkg:npm/nested-error-stacks@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nested-error-stacks/-/nested-error-stacks-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nested-error-stacks@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nested-error-stacks/-/nested-error-stacks-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prepend-http",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e19978b95e6a322b0d549f813ea2933629cb092270ef2b2b8eba67238f0df06b0f3a64d8c7c1550e3962dce1b0b32dd70a35a5811fd7bdf6c6d6cc342c55a62"
        }
      ],
      "purl": "pkg:npm/prepend-http@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-all-stream",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c002a59891e4f3261861b1d78f6a6eca0eb3b883dc51d08c5f42e3f5ad4e0530e35979d93f7c703ccee4567f7ec5cf12ffdcfaeb404fd981b6912f446214e08"
        }
      ],
      "purl": "pkg:npm/read-all-stream@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-all-stream/-/read-all-stream-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-all-stream@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-all-stream/-/read-all-stream-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a9677ccffa34f53c8ec8f277a6257e002a6017d3bd199183d5595fc068a4c997eb570931b255d0b56b848bf11510604c24fdfdf8657f144f290debc170aea00"
        }
      ],
      "purl": "pkg:npm/statuses@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timed-out",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6aa893a2d6b179ccdb3fa6ce2f99b1384850ab338891ecb5be18702c1ea3bf12e9aa6c859c7a2a1ebd82cce71651810487ea01602fd27fb81ec4709850f6789"
        }
      ],
      "purl": "pkg:npm/timed-out@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timed-out/-/timed-out-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timed-out@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timed-out/-/timed-out-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gruntfile-editor",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fc6d1fc9234d23e8dbb7c7dfb686e40e9c1d3e7998ff9a569303300340a25d4c24a1fc6927b181186f36147c4e8b4b2288409a28fbc833a049e7cabc5faf6f6"
        }
      ],
      "purl": "pkg:npm/gruntfile-editor@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gruntfile-editor/-/gruntfile-editor-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gruntfile-editor@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gruntfile-editor/-/gruntfile-editor-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-query",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57e0994b4ca819e18a07f86e70bcabaabb919ae54b7014be2bc4e4a5e4fde7fdfc77170484bbfa2cb086af67922bbba81b08182bbdc47fce9839dfb7a349a01f"
        }
      ],
      "purl": "pkg:npm/ast-query@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ast-query/-/ast-query-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-query@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ast-query/-/ast-query-0.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfd15680a738f308cc969cc5e7298a4b5005f0e2209ca2e9f55c8deca6ddb72acfffd967770505a82b4c9be4c026625feca24515873870525f5534c690a130b0"
        }
      ],
      "purl": "pkg:npm/escodegen@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.3.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/escodegen, /app/test/fixtures/lookup-project/node_modules/.bin/esgenerate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "escodegen, esgenerate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab1c41f7de3fecdb4447181774580b1c8b3d33a6e12d773aaad526599dcbf3e81343da9aa32922dbcf3b3f622a018b2810dcabf1251b4eeb52b439e23874831e"
        }
      ],
      "purl": "pkg:npm/esprima@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/esparse, /app/test/fixtures/lookup-project/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1690a32437e6a37bec73fd732927aa479938dad70887114896fabe87d8f47cedaafe1dae2cacb07aaeeb609fb40a856fac640ec484b9c3206b5bffaf179f0151"
        }
      ],
      "purl": "pkg:npm/estraverse@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7f8981f9dd7deab83c1f1d1cf8cbcae7e17704c30089796b2e97da45d7395d31b1ad80eb4c34110eb985b007511094ad8b45ad5f7afdd8020ca6fd1125a790a"
        }
      ],
      "purl": "pkg:npm/esutils@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56d0af07d488421937685ea1f8df3911aa8868114801f67d0aef8d2471d5bdcf016c4727bc3705c3ab2a436750ad3e9294ead9ab7b48bf20fdf841aafe526bc9"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b61f0d13b4d90c26121a6c1c08a2328bf581cee53d27e5e36a589ecbae57a5ff30db7ed429c696a98bcb59b375f51d66bebbe41ec9d1a6cf3354d26d3df9172"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "traverse",
      "version": "0.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff2f79ea0a54a3d64d09bf7d623c46ece6ac9716561df08701451fb21c2a3979b1508bea2e354ee7cd414fe80ce7df9057db457bafc2186e77b6c03563b45276"
        }
      ],
      "purl": "pkg:npm/traverse@0.6.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/traverse/-/traverse-0.6.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/traverse@0.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/traverse/-/traverse-0.6.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "0.8.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fab92caed76a43c768ef23ac98fe582206d275b658b8222b9df1f9be3158180af55e0269324b1bdeb159309de388ab94c835440383150d86e4037ae26c99f74e"
        }
      ],
      "purl": "pkg:npm/inquirer@0.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@0.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-0.8.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "inquirer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab98bc6c52e0db00dfb2e479e9cd4dce52453f3543fbd9b1843ae1a8e1a280415af3b3991e517ef5d59e196cd54cfff4102880fc9506cdfcd1af6b7779839147"
        }
      ],
      "purl": "pkg:npm/ansi-regex@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78c5366a421e108902c465d43660e726ad4acce2223e727eacaa917ba85cc44def20e3efa4cac160e9ff065ef33656098ffcd0c57aae027a331d409ff56867b2"
        }
      ],
      "purl": "pkg:npm/cli-width@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5312a57c246e081c525d4e02eadf6c71b0f2599e1595a1457688cab7326e4a4b8e050e42345ba6fb36571701e3a3e0b1042d6deb39583e01c88058cbf2082811"
        }
      ],
      "purl": "pkg:npm/figures@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.10.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f660c3c2a54899ae8e657efd6650c009997cb019b44c49e47fdf7357788c0381b39084fff618aa3f9998d07a13d6234b0ab29cfd1d4707257ec897d159526bc9"
        }
      ],
      "purl": "pkg:npm/lodash@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "cli/utils.js",
            "line": 1
          },
          {
            "location": "lib/environment.js",
            "line": 6
          },
          {
            "location": "lib/resolver.js",
            "line": 4
          },
          {
            "location": "lib/util/log.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readline2",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aacf06186fa12c631a0ce1a377e9838250e861c1c3923218ef3e51534fc0a6c193d2aca9cab5ac90d79e994a83f94c485e26683184f968bc06a787a1a3266122"
        }
      ],
      "purl": "pkg:npm/readline2@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readline2@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a6beb6389bfee865a99e84ca058b5b5bc14fe45db56f45318cd92ec5f8f662de7e75271fbd01c490dc442c6a0ded47e852da18a07e038ffca97c92b8bf5f9d8"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da1f2ad823f711e3a10c9fa377ddf63d13296b7fe9389146a05db627553f0cd6c42b68125b60ea785e3a563097b12417842fa4fe5f3f81a69105028bea150f7d"
        }
      ],
      "purl": "pkg:npm/strip-ansi@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/readline2/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "2.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb9aaf7ee95becd5e863ff8e136f3ddb45848058ba6a20e37f9885f6b0367fdb415de8cb8132ddd16c64725bc84168c51477cd2656fba524ecae38220e1f94ba"
        }
      ],
      "purl": "pkg:npm/rx@2.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-2.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-2.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istextorbinary",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a99e69b540ee9e2da97429e0153ada61ae646a5434997e3b3219f4f2d4f40d966fffbca15f578c6fd945b5755b5a116d811b692c6fd476a5408e1f6d78ee71fb"
        }
      ],
      "purl": "pkg:npm/istextorbinary@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istextorbinary@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istextorbinary/-/istextorbinary-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binaryextensions",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c671b49782b782133adab1730e2da370d12e20297ab90e0d82f1a9a90b18ec7816f203c37805863b11c8fe4faa65f5df300372b73ac0ac634f5e275a0b0b5b98"
        }
      ],
      "purl": "pkg:npm/binaryextensions@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binaryextensions@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binaryextensions/-/binaryextensions-1.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "binaryextensions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "textextensions",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e6f4a8c45a20e6b462c1ad3a9711db86ce56134e53daa0329dab96114210f4ad88e8eb564d4d8299ff1e49e1a8cf4811fdc08618e6a9bd18d1b9a2d20a8ed38"
        }
      ],
      "purl": "pkg:npm/textextensions@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/textextensions/-/textextensions-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/textextensions@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/textextensions/-/textextensions-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "textextensions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem-fs-editor",
      "version": "1.2.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73af073b0f679867ab35a19a08baa2edb79fc10335fda994dc35920aafd961f0e9ebec917673ced04b25a4d40ad4c1415c828c596b0868ef46710d2f9b4b065e"
        }
      ],
      "purl": "pkg:npm/mem-fs-editor@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem-fs-editor/-/mem-fs-editor-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem-fs-editor@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem-fs-editor/-/mem-fs-editor-1.2.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mem-fs-editor,mem-fs-editor/lib/state.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 11
          },
          {
            "location": "lib/util/transform.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "5.0.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73d20f31acdf4484e998000a8b6d9d2b554ac460d7f5e861a9f0010eb88bfe5ccef76c5c50a1093d01eb540ff660748d141e22165ca45665afc28e3c9ebdcec4"
        }
      ],
      "purl": "pkg:npm/glob@5.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sinon",
      "version": "1.17.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "33daedc90c4a7dc4d3741eb8ae93d245a4f33afba76fe1c73efff73f1bcd3eb1039c54a7cbde4f8baff75680f8ef5a1dcb46b2d081f2cd3dc112b7dc2d78fa34"
        }
      ],
      "purl": "pkg:npm/sinon@1.17.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sinon/-/sinon-1.17.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sinon@1.17.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sinon/-/sinon-1.17.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "formatio",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70f87b8acea4dddf2d21487ea675d7b806c3fee8525c682a2cfc3452b629bf995f749f8c30c4a3c78d09369a8fed3a29f4db76e58a265848919a41db3af90268"
        }
      ],
      "purl": "pkg:npm/formatio@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/formatio/-/formatio-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/formatio@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/formatio/-/formatio-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is unmaintained. Use @sinonjs/formatio instead"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "samsam",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8952fb2e26e9337b65e2b40fc1e3975eb9a319e831c76edf9533a3404643dcf5dee2864d173bb3e928b89a095e2bf25653f8720afb55d35454a2f8ef044a439b"
        }
      ],
      "purl": "pkg:npm/samsam@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/samsam/-/samsam-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/samsam@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/samsam/-/samsam-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package has been deprecated in favour of @sinonjs/samsam"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lolex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "618a7c72acfbffc7abb99d792f59b370f92f2d8c62a5f76c5880c44af35d36640ff68ed3b038ad46136e576c5beda16eda87d99e06a8d63895ad567ce36c7805"
        }
      ],
      "purl": "pkg:npm/lolex@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lolex/-/lolex-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lolex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lolex/-/lolex-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util",
      "version": "0.12.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9197ff2ba84422b58723a5ea38552288c6beefdc04fc3f10f8d08d0167259328376f877693bb344067a936388005cf9a4773753c0c872fba7a51c2d8e8b9ab9c"
        }
      ],
      "purl": "pkg:npm/util@0.12.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util/-/util-0.12.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.12.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util/-/util-0.12.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "util"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/log.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arguments",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f10ec40118f31272a9b7f3c20fb7b5720512d1ae97f2ee6d75288ca978688ce76857d4ec32c88efbd54b0b9bc098ef0deff1a65e7ef28d1f2a9c0e9b5401337c"
        }
      ],
      "purl": "pkg:npm/is-arguments@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arguments@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f4e3dcba9c53aea26e701b245cdff81d4cb3bde1dc9254a4400a3d5198964141795b4cc86d3488245a4507abe8d8999bca7f5e045b51282679e36e6a078a3d1"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-generator-function",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ec123cbd977ca25c443e3ec5dd981c043dc3b169758bb2929da65154548f6fab58998087a4782d0bd7aeea7aef3a73341ac5e777abf533bb0d2cc0bd22acbf0"
        }
      ],
      "purl": "pkg:npm/is-generator-function@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-generator-function@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typed-array",
      "version": "1.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c9aa010789666f329685677b9373c9073cce3ee000d39439e2b902fb714fd40c0d1097b17bd3219f1e987770b35ef9cf6da1a8a0bfe0c5cd324a85cd82b4ee8"
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typed-array@1.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "available-typed-arrays",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cc0f42a2378e9e8a97b38924f52cf3ff4937c3534b2e7c84979a34a0bd5b28536b6ac5cb5078049e8d671f36dc582aa11333553143cb29d8ead2056a4763ab3"
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/available-typed-arrays@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-each",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ea61f2e9ee6a3dbc8c907fcca45b6bfb03ed8de108de09e239f83cfd5eb6a23b58a09fcd708e21fb15bf6f48e5af41f36d9926b81f6468413aeb5e2bdd5199b"
        }
      ],
      "purl": "pkg:npm/for-each@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-each/-/for-each-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-each/-/for-each-0.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d410b40551614bfa74aadc3a7a7a7c7bef0e0f452b2b4a052f3b528cdce170a037583b89c7100f5f33ee3ed2a48c463d514a045a55fff1f80a7aed92f22f494c"
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gopd",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77ae5b36521a771be96ff03669b55d96a2aa579eb78ee4676755ad93ab35b0847cb8db1747bd31a88cd5ab155fd5e4ea0ee9f04f632473311e69ecc2293661c0"
        }
      ],
      "purl": "pkg:npm/gopd@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gopd/-/gopd-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gopd/-/gopd-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-typed-array",
      "version": "1.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3d738c64c7a98f89dc29ef5f347246167cc9afc698e566e22e74db437f837fb5301407c5496d7db9a99a00b2bb46b983671b0de96b401781b18a441f3f11c78"
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-typed-array@1.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0652dde4484626938213c7307f6fdbda2037d455637f325d45c25d752259c81b689a27d3ba59767d4ab60cf4d2c8f0e08189e37663c4960b6a09574450eea62"
        }
      ],
      "purl": "pkg:npm/nopt@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2cd8ac26f023cbe86bbb1a77195e0891966c713237e3e2127de33585eb01f55e9ecc80df5d8ac18bd4c85d58e331c101e1014deed2fe7450c4938b3c8cc04cc8"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/pretty-bytes"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pretty-bytes"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "pretty-bytes"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/binary-diff.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-chunk",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4d2d34dd5f8e5d285b46f025f9a4a9af4bd579bbdc0113e82492537bc610ee86ade90362383bb00b7cac68b0231c2c73a19318fa18d69c6617d7b69e6794276"
        }
      ],
      "purl": "pkg:npm/read-chunk@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-chunk/-/read-chunk-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-chunk@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-chunk/-/read-chunk-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-async",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8e5fec3e231160a54a497e4bf6a06374f84c4fb3af05e2c6477da451c787437b1010906f376adba02951329724f901179eb371c16df9aebe78dbaddf23f568f"
        }
      ],
      "purl": "pkg:npm/run-async@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-async@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "372d0a3787724fc652084d1faed71b0091a833f1d302ba723e47a58b5ff4d1a61f9b4b1b0ff1a4ff8c7b3760cff50286a41b22407ee7eaba66d4befd46dbe211"
        }
      ],
      "purl": "pkg:npm/shelljs@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore.string",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb191a6ee09a2019f37c8bd7de407142a0acd1aaff6df2700e71441c9526fd9ad15614f7208b5d445e5c6630112f3127c9062d21486c6762c6da3dc789d14e15"
        }
      ],
      "purl": "pkg:npm/underscore.string@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore.string@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a082229f104b9bbf753044da93ccb22766900e98acf0747a840665bf84103f9adf7d7a0f9be15ad7ea2f8844bc54f3e58961f6b7deb1b046c7a0e1e125520b1"
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/user-home"
        },
        {
          "name": "cdx:npm:bin",
          "value": "user-home"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba0196fbecaf1a8c6be08ad2a31b22787d9bfcd9596d7b0168bf3939f7f7cf8f3bc92f5e8a2463adf764070d6206fceffd22b45e38d8cbe2818b1e4f22c78eb5"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-assert",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c91b5e2e8e6cea7188dfa647e8533852cb8829a44d8e177fbc56cf177ccf6ad8ca07a84ad9e2185fc7059dd771aa983d87f5735cbb1a14fbd6197d5e2af777e"
        }
      ],
      "purl": "pkg:npm/yeoman-assert@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-assert/-/yeoman-assert-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-assert@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-assert/-/yeoman-assert-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-environment",
      "version": "1.6.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a0d260a6fcc84c73b40141bf0a850a9021d2fca2571cc8d5022b43762851c8f4f626c0437fbd2db7c6fd89660af60b4ce5d1992bad71f694f24e2ef2f271fb6"
        }
      ],
      "purl": "pkg:npm/yeoman-environment@1.6.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-environment/-/yeoman-environment-1.6.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-environment@1.6.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-environment/-/yeoman-environment-1.6.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "2.2.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f707e6dd12f3329fcfc93156bb0f65884cdd971b1d1a2c425b46535355c39ad94092fa555d33c617c2a77d2b34866dc13db835f4ead43cfb119075e8444a4fd6"
        }
      ],
      "purl": "pkg:npm/diff@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 2
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "4.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24f0ed312af46eddb95bae2aefddabbe5ad2c08699c2a50086a758292af9ed687fc41710e490d62ccf399dd9fe43559d0505cb6fd6060a5d1037f4f41e9a94d0"
        }
      ],
      "purl": "pkg:npm/globby@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-4.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "globby"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/resolver.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "6.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30a65e44dc98640555546d6865e2da5a27b5bb0787e349bd019c08c31c8f6d3497e211eb5584b32e0d11a3967947b5ca9085fe09cea80f5aea783267c2c07cfc"
        }
      ],
      "purl": "pkg:npm/glob@6.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-6.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@6.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-6.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grouped-queue",
      "version": "0.3.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "010c68a29bff6c12361ac2bc64830781903794766beea96c7909d229a866429819e71e5a5fb0de4fd8b84cebe8d0e6c5adf047d382140f1cd8d605b49f19bc85"
        }
      ],
      "purl": "pkg:npm/grouped-queue@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grouped-queue/-/grouped-queue-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grouped-queue@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grouped-queue/-/grouped-queue-0.3.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "grouped-queue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 7
          },
          {
            "location": "lib/util/conflicter.js",
            "line": 5
          },
          {
            "location": "lib/util/util.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "1.2.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7624a7a607effceceae902ae57699473067e0f6e1bd372775ba115c73bed9025894cfac7da028bb2a8125b4bf344c65916115d867bf391ad11509c489bb00ec5"
        }
      ],
      "purl": "pkg:npm/inquirer@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-1.2.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "inquirer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/adapter.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c225eeb4d8c35253440d61dc607de3b59521777738fd5a236acb03f331dd1c2635df16d9cb65db5be34a430034b561815730c0f6a1336307e84ac5a6be289d87"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db9b4006ad3dd1834a905e891fb95cc0ed331494d191ee0972af625f69ebfd2cf40a38efe207249b0956e93cbf6a8c8577acf7cac47684c182d8616e826068e8"
        }
      ],
      "purl": "pkg:npm/cli-cursor@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ade4a31f81ee88597195a05a142892e8eefa6461b6ca02a84a50ac8a929d699b8a48fc7ff9bb7d9942e49f89746ac5736c47d04265d183a5a9ea0bfa9b4c0497"
        }
      ],
      "purl": "pkg:npm/restore-cursor@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exit-hook",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32c1b7a6b395c355ad2d70196ccdca898b68a0a4752efc47877547b15b48cb4ba252ef2eb31801ffde033f61f1b43ffaeb594b741eb2cd0d3d94625242bea792"
        }
      ],
      "purl": "pkg:npm/exit-hook@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exit-hook/-/exit-hook-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exit-hook@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exit-hook/-/exit-hook-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1913160f1a4e07a0e0936139528fb778406fb4e3a58a6326a5b1622ae2c59d0cd80dabed2c56372b9a276b8d6380dfd675166d1bbbadb954954cbe076d91c693"
        }
      ],
      "purl": "pkg:npm/cli-width@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "external-editor",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d176253f8de3cf1320263ba00c9f396745033e7a309146df173b4dbec4860bdb0954893decc65b1846fd580848547d1480dc682e3ffd650801e021c9cb3d8619"
        }
      ],
      "purl": "pkg:npm/external-editor@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/external-editor/-/external-editor-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/external-editor@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/external-editor/-/external-editor-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spawn-sync",
      "version": "1.0.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4358182b81867336086c7a1a3424eba1fb97e0f6ee905a10166b9d500bbf94e6b0a1799fe3d43ac4667c84d1104146a67db845c63e04923349e4cba6eeae957"
        }
      ],
      "purl": "pkg:npm/spawn-sync@1.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spawn-sync/-/spawn-sync-1.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-sync@1.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spawn-sync/-/spawn-sync-1.0.15.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-shim",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ddd1cbc1f2a439b95b7496f0887b105a44ec352b22a6e6c6ee960d9f58e1e31138acb82cd6cadf9e4d928432cf2fe87c33a06b3cc62936ea383b78233aa52f8"
        }
      ],
      "purl": "pkg:npm/os-shim@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-shim/-/os-shim-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-shim@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-shim/-/os-shim-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3d3d3a8c5860ef6be1aa0a53aa055f6cdd2321ecc03732ad29254740a07b85eb962813b3b42deae66999157d3e7f3607e8d7c1f87988b21bbcca3ad9c46f1b3"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.29.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b49014c32c5ff4960cc2b0f56625228ce7190b357ed9001d10fa7d833f7ec930844f542d91e1cdc174eeb1fbe6d714a7ed6e1bd27ca830c407b1304f8144347"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a26a2b8dea06a991d97e71952bebb5ba23c8eab8de2591a937bed22c2160a5e1720f3fc7dfb28c8debff8fb865e7432f02bbc5b6cbd5f1877d51ab833ac14ba"
        }
      ],
      "purl": "pkg:npm/rx@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d17b15a502e75425c725fc84b3cb42d33a53548af93ca2ac42d913dbd230ba99cf4e3b4f990df14ffe32091105f6162457fdccde4cdc513480653e9aea1f35b7"
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4690152900394fadf1123ebf82221b504b59c09e1414873766dbc4922694111ca5a9ef316f922fa9c80ebab64b6a1bfddc22ca7f1730e5823e0d9714051c8b5c"
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d69a94a918e484f27d9a236af52c0c7ddbe2ea504971de9e171bdf6a2bd085a1f74a08ac7e2bae76f167b5d28e9b1b9e7bfefb97e14f8caad08d6be63e35ab47"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e236ed657340b1f65b0078a2aa32cf0620a5d7a7444b5cc8e07a73cf1c3ad5393e96817eb010c12b1d4808a28ac08a90eccd26167d539a437b7ae4a771680789"
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a63eb5b4161d9fc4ecdd05b16fe20d66ea947bda16852cf2761b94891042dfd72fa2690ac31ba71608f8f2e7844761b640b7b5fe96cebdd0ac3ad807565c1cd"
        }
      ],
      "purl": "pkg:npm/log-symbols@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "log-symbols"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/util/log.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem-fs",
      "version": "1.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fc8348d629d97ca4cd0ba803dd2bd8bc1112fb9d8af39897d1871322587dae61d7d89dbeee5e79b055bd1919eef1c84978963fa72c8537c9fe333d44fe5ec55"
        }
      ],
      "purl": "pkg:npm/mem-fs@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem-fs/-/mem-fs-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem-fs@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem-fs/-/mem-fs-1.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mem-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a7683438314c8fd96e99c93e84b0ccea04f65a33f6af83c8aea3e976777402b3427ee916aa90757fdbf94ec034ee7811de27fd8b1bd96b2d6ddde6b58fb9cb9"
        }
      ],
      "purl": "pkg:npm/through2@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "untildify",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b098db0e9d86a1dbe407415965c9fb93a69f562b2a5f90590fb62adf1a789cdd8ed790412b470b9b75709f6bd0685ed40d2d1452cad03249299660c8e5fb248a"
        }
      ],
      "purl": "pkg:npm/untildify@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/untildify/-/untildify-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/untildify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/untildify/-/untildify-2.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "untildify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/environment.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-homedir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "079254ddc69bce4f1cebb99145ddc40a644e69f8d83176eece5c2da9d33c21b4bc92d9538b1f1a1466f66c018aad24489677cac28bc6514afbd8950fc8e6fa91"
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yeoman-welcome",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "920f83e2fc22aa0224b1569c62493d5a5a1550f767c2a1257a33ee0aad6ed5fc9ab714967c84cbfef57a281ad893fe100ef17b5deb1132e4b2b248085f189344"
        }
      ],
      "purl": "pkg:npm/yeoman-welcome@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeoman-welcome/-/yeoman-welcome-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeoman-welcome@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeoman-welcome/-/yeoman-welcome-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "generator-dummy",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c0cd9f0b637e5e1d0b6836380e9b4e0de7e5416b7bf7ca81089a80e7277aa341a91a58d10fadbc0a63f8eb43c7301a3828dcfe1aea5ce17ef8bdc2c5c266190"
        }
      ],
      "purl": "pkg:npm/generator-dummy@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/generator-dummy/-/generator-dummy-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/generator-dummy@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/generator-dummy/-/generator-dummy-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "generator-jquery",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d71c4cdd7f373fff82f9f8b55d3f0dc81e87fb15ff4d0f7c211346e6859da06229b78451036d5771cba90782af3ee501c8bd2f3ec1a1d3275681d7c68a5d23f"
        }
      ],
      "purl": "pkg:npm/generator-jquery@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/generator-jquery/-/generator-jquery-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/generator-jquery@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/generator-jquery/-/generator-jquery-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compare-version",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a490e1e7fe30ac49d75ff556459bebb8018793329daf8eb3d753a54cf37e56b0139565a148a7b03422757eeb423b90bb7890779cf305640d4b798b5c15ba19d8"
        }
      ],
      "purl": "pkg:npm/compare-version@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compare-version/-/compare-version-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compare-version@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compare-version/-/compare-version-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-online",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d303f5c83b79f6cff085e0dd8a20764da99d1d3accaffbbf5df10efc0fdd258c0e7c771c0746d83ddd889aa8cc05113a9e12120d2d6b5917a4d3f565d6dc30c8"
        }
      ],
      "purl": "pkg:npm/is-online@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-online/-/is-online-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-online@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-online/-/is-online-3.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/is-online"
        },
        {
          "name": "cdx:npm:bin",
          "value": "is-online"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-dns",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2076cf35d67e2c26454fe3f601b41539942aa756e88f3938a5e2b063df98e05ea1ce5399f656e6cfaa551bc2fd9ce86df0f54a782cc1794cf3f1eaa68f606bf"
        }
      ],
      "purl": "pkg:npm/native-dns@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/silverwind/node-dns/tarball/8b75198dd8"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-dns@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://github.com/silverwind/node-dns/tarball/8b75198dd8"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "url"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "https://github.com/silverwind/node-dns/tarball/8b75198dd8"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6a4e01fd346f88209e327cab367ba3e9d5b660f306c36ca1d3db51eb2c879805344b80c60a9cc4cf02e2372dcb3ad677f1e61d719579db26d1f5917e7f77f9e"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-dns-cache",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3d1d71dd6ffba97717e281a15b479dc5f2708aab133c5ae1df4d606cbac565c12499677ab0591743e8ac76c7c1c123543921ac9cc1c24ebc1a1765624d7d512"
        }
      ],
      "purl": "pkg:npm/native-dns-cache@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-dns-cache/-/native-dns-cache-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-dns-cache@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-dns-cache/-/native-dns-cache-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "binaryheap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4915be18b7947d159c1b25ac4e6b217e4f9b319f97a2536340f7f2ce788d60d85505453771a5d996a698a43b83b901b3737bcb34b0be99b85c41d72e00cbc18"
        }
      ],
      "purl": "pkg:npm/binaryheap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binaryheap/-/binaryheap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binaryheap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binaryheap/-/binaryheap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-dns-packet",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f55f19c5153501ee6ba399ae3af16c803a6c95b64bae2d37a5c49175ded49320f3b9e97edb1c02eb1b41b88c5427bf24cf0ade159c58997b35a97ca6da1dcfa"
        }
      ],
      "purl": "pkg:npm/native-dns-packet@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-dns-packet/-/native-dns-packet-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-dns-packet@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-dns-packet/-/native-dns-packet-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "buffercursor",
      "version": "0.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67ee899bf796e884dea9c1502955d7ecb6081a4eeb10da8228727809b59f24c78ba506498f5bfbd167a190b9a9fb590537f4320a0a50dd9d1d2941c0c126dff7"
        }
      ],
      "purl": "pkg:npm/buffercursor@0.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffercursor/-/buffercursor-0.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffercursor@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffercursor/-/buffercursor-0.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdeb9f726c6b8b87b75d2ad3d31c1f511ee482e2246b105ea2c0e0d34c835a1938f7077091252bbefb26ee773be5ed4f532bc87998fa9d2f15411633dbf4b85e"
        }
      ],
      "purl": "pkg:npm/verror@1.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ab937e5ef327422838ff02b0a5a3556b3d598df33a61e55e00b47c08b8786f317b0a7fbdd44f704e0fe6b30485bedf0389e058441fbcf2689085bc286362f30"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "root-hints",
      "version": "1.0.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16bf8cdff189e3d2d64883fd8f8fe9aff74c213e443664e4ad566bee4fc701228a17376767b4f1ab0ee9ab5f6babc12ccbaa1875af79da3f9c81f25a71ba3f8c"
        }
      ],
      "purl": "pkg:npm/root-hints@1.0.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/root-hints/-/root-hints-1.0.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/root-hints@1.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/root-hints/-/root-hints-1.0.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multiline",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c6a660c864a290f84571d2c874ef9ed5eaa95bfa8bae072a02e42587ec9d1b39de8a44cea46ba97d2c61d67ded7b38ac66fb802c2ecd6d8222b8bd9231eba45"
        }
      ],
      "purl": "pkg:npm/multiline@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multiline/-/multiline-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multiline@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multiline/-/multiline-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-name",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09072ac057a62e262a826a4eb7c61b5830a741de6e9109b0fbfdb79144daff09e49326ee2fdd00a6d890840ca3e249bd5db2d9e1383ad00403125a5243dd3ab7"
        }
      ],
      "purl": "pkg:npm/pkg-name@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-name/-/pkg-name-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-name@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-name/-/pkg-name-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/pkg-name"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pkg-name"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower-name",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06944e7194bbb6342d6723c016823a556ca3af534f7c98739c6dfcd77d2a57fad67d565c38ef7b0abe49d5fb39e4d480ec3f52d0f2b4694a9d0cd0509c6a2353"
        }
      ],
      "purl": "pkg:npm/bower-name@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower-name/-/bower-name-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower-name@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower-name/-/bower-name-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/bower-name"
        },
        {
          "name": "cdx:npm:bin",
          "value": "bower-name"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "5.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "327ca9ce4696f1d95d03c01b2458ccb3bcb5e3eca477657c2422ca4af5f51a6cf1d5a947dd8fb72c0af2c070e8005db04b7a67669e2069ca18b6fa81785e9dad"
        }
      ],
      "purl": "pkg:npm/got@5.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-5.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-5.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-error-class",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8184ca29ec453b7921db4d07d4d8adefab11c11b4e637daf41dde3a4040aa4bb59ab236c49035f23837ba3778fdb0523577e694d629162a1540c1bd485afcf93"
        }
      ],
      "purl": "pkg:npm/create-error-class@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-error-class@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "capture-stack-trace",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ff58cd9442ce9530752d8d40e7653448fa2d5cad6b5e272485cebf54a46a106b85907df5d54d35ee7a48e5ed38d9465705d977e38084d3d07c59f519f1793d3"
        }
      ],
      "purl": "pkg:npm/capture-stack-trace@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/capture-stack-trace@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ac2c555f596b49f746723941ccaa4eff4b6c3682e40ac542368ad8f777dd800c78715126c23068b57f5701709ef13354e8fa913f2a16f0a35cae35b3043ca78"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-redirect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72bfd295411ee733869b3be3f5b5320b82d5be4355017bb81b2b572cd32bd699f2f9aeb932943d209cc51c3e6f8bb1722606f8aaddbbf9e4b74ee427a81f9143"
        }
      ],
      "purl": "pkg:npm/is-redirect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-redirect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4546d478ac2f9b75c6d9561a9a124bd71164b608ef3f32f41eaf02fbacab588b300f2dc12171aa0b187191cdf437d8ea2b7d75815535dfb2bc122e79ff354946"
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-status-codes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5c04c811c5d31613c29e582aa4d9120eaef51bd170b061f12c639ff2d8d957caae18fd1ba69ce66f4e3e0d6ebefbf956f60be93206845376434e4bc2f777f69"
        }
      ],
      "purl": "pkg:npm/node-status-codes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-status-codes/-/node-status-codes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-status-codes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-status-codes/-/node-status-codes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-all-stream",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c8d5dacf1db9817140d6ac9eee965fc5d906fc1e4c019dc571f3f46929815220009869545045e21260f759cff9add72d7ea8c08eadf45e4e8a444666b1b4feb"
        }
      ],
      "purl": "pkg:npm/read-all-stream@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-all-stream/-/read-all-stream-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-all-stream@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-all-stream/-/read-all-stream-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unzip-response",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7009c8e38447295b8e49648c9213104762fe58f4478bd8e20611fad22a9d9d31414616fe02a6f664c096d581ef0ebc61f604d36d241c7aec3b8ab8985ff8de5"
        }
      ],
      "purl": "pkg:npm/unzip-response@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unzip-response/-/unzip-response-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unzip-response@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unzip-response/-/unzip-response-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse-lax",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "055038951e4f22f8b2d8f32c78d7768db150fa3c12c1019d25e8dfe5cb5dd6b117b7462977bc9a9d42bdfa561e72156537955a4c91acbb653fdcc0c3bba2a004"
        }
      ],
      "purl": "pkg:npm/url-parse-lax@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-name",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "351652c6a0ecd7cef855a33cfb2a7f89a021e6312cccb8a0d2687654ab2646b88aee6d7477eec9699b33c9fd429176a1a24e09640e1a1dc61cc6a45f13c79e1f"
        }
      ],
      "purl": "pkg:npm/npm-name@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-name/-/npm-name-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-name@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-name/-/npm-name-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/test/fixtures/lookup-project/node_modules/.bin/npm-name"
        },
        {
          "name": "cdx:npm:bin",
          "value": "npm-name"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65b811e5a64475fe142995413d82206a09419921761e2f78b363dc2078511858ca62ef9c86325d61f1e7e2bb77841e9e08a2c9f208952087e031ad5e8437d928"
        }
      ],
      "purl": "pkg:npm/registry-url@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/lookup-project/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/lookup-project/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/lookup-project/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-normalize-package-bin@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-bundled@1.1.2",
      "dependsOn": [
        "pkg:npm/npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/installed-package-contents@1.0.7",
      "dependsOn": [
        "pkg:npm/npm-bundled@1.1.2",
        "pkg:npm/npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/name-from-folder@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@2.0.1",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@5.1.0",
      "dependsOn": [
        "pkg:npm/brace-expansion@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@8.0.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@5.1.0",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-package-json-fast@2.0.3",
      "dependsOn": [
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/map-workspaces@2.0.3",
      "dependsOn": [
        "pkg:npm/@npmcli/name-from-folder@1.0.1",
        "pkg:npm/glob@8.0.3",
        "pkg:npm/minimatch@5.1.0",
        "pkg:npm/read-package-json-fast@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@gar/promisify@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@6.0.0",
      "dependsOn": [
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@7.3.7",
      "dependsOn": [
        "pkg:npm/lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/fs@1.1.1",
      "dependsOn": [
        "pkg:npm/@gar/promisify@1.1.3",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.2",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@3.0.2",
      "dependsOn": [
        "pkg:npm/glob@7.2.3"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/move-file@1.1.2",
      "dependsOn": [
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/rimraf@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/chownr@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass@3.1.6",
      "dependsOn": [
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-minipass@2.1.0",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/infer-owner@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass-collect@1.0.2",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/minipass-flush@1.0.5",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/minipass-pipeline@1.2.4",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/clean-stack@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/indent-string@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aggregate-error@3.1.0",
      "dependsOn": [
        "pkg:npm/clean-stack@2.2.0",
        "pkg:npm/indent-string@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-map@4.0.0",
      "dependsOn": [
        "pkg:npm/aggregate-error@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/promise-inflight@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ssri@8.0.1",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/minizlib@2.1.2",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tar@6.1.11",
      "dependsOn": [
        "pkg:npm/chownr@2.0.0",
        "pkg:npm/fs-minipass@2.1.0",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/minizlib@2.1.2",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-slug@2.0.2",
      "dependsOn": [
        "pkg:npm/imurmurhash@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/unique-filename@1.1.1",
      "dependsOn": [
        "pkg:npm/unique-slug@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cacache@15.3.0",
      "dependsOn": [
        "pkg:npm/@npmcli/fs@1.1.1",
        "pkg:npm/@npmcli/move-file@1.1.2",
        "pkg:npm/chownr@2.0.0",
        "pkg:npm/fs-minipass@2.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/infer-owner@1.0.4",
        "pkg:npm/lru-cache@6.0.0",
        "pkg:npm/minipass-collect@1.0.2",
        "pkg:npm/minipass-flush@1.0.5",
        "pkg:npm/minipass-pipeline@1.2.4",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/p-map@4.0.0",
        "pkg:npm/promise-inflight@1.0.1",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/ssri@8.0.1",
        "pkg:npm/tar@6.1.11",
        "pkg:npm/unique-filename@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/promise-spawn@1.3.2",
      "dependsOn": [
        "pkg:npm/infer-owner@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/npm-install-checks@4.0.0",
      "dependsOn": [
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@4.1.0",
      "dependsOn": [
        "pkg:npm/lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/builtins@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-name@3.0.0",
      "dependsOn": [
        "pkg:npm/builtins@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/npm-package-arg@8.1.5",
      "dependsOn": [
        "pkg:npm/hosted-git-info@4.1.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/validate-npm-package-name@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/npm-pick-manifest@6.1.1",
      "dependsOn": [
        "pkg:npm/npm-install-checks@4.0.0",
        "pkg:npm/npm-normalize-package-bin@1.0.1",
        "pkg:npm/npm-package-arg@8.1.5",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/err-code@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/retry@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-retry@2.0.1",
      "dependsOn": [
        "pkg:npm/err-code@2.0.3",
        "pkg:npm/retry@0.12.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/git@2.1.0",
      "dependsOn": [
        "pkg:npm/@npmcli/promise-spawn@1.3.2",
        "pkg:npm/lru-cache@6.0.0",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/npm-pick-manifest@6.1.1",
        "pkg:npm/promise-inflight@1.0.1",
        "pkg:npm/promise-retry@2.0.1",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/node-gyp@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/env-paths@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.3.4",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/humanize-ms@1.2.1",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/agentkeepalive@4.2.1",
      "dependsOn": [
        "pkg:npm/debug@4.3.4",
        "pkg:npm/depd@1.1.2",
        "pkg:npm/humanize-ms@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/http-cache-semantics@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tootallnate/once@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/agent-base@6.0.2",
      "dependsOn": [
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy-agent@4.0.1",
      "dependsOn": [
        "pkg:npm/@tootallnate/once@1.1.2",
        "pkg:npm/agent-base@6.0.2",
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/https-proxy-agent@5.0.1",
      "dependsOn": [
        "pkg:npm/agent-base@6.0.2",
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/is-lambda@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass-sized@1.0.3",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/encoding@0.1.13",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/minipass-fetch@1.4.1",
      "dependsOn": [
        "pkg:npm/encoding@0.1.13",
        "pkg:npm/minipass-sized@1.0.3",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/minizlib@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ip@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/smart-buffer@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socks@2.6.2",
      "dependsOn": [
        "pkg:npm/ip@1.1.8",
        "pkg:npm/smart-buffer@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/socks-proxy-agent@6.2.0",
      "dependsOn": [
        "pkg:npm/agent-base@6.0.2",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/socks@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/make-fetch-happen@9.1.0",
      "dependsOn": [
        "pkg:npm/agentkeepalive@4.2.1",
        "pkg:npm/cacache@15.3.0",
        "pkg:npm/http-cache-semantics@4.1.0",
        "pkg:npm/http-proxy-agent@4.0.1",
        "pkg:npm/https-proxy-agent@5.0.1",
        "pkg:npm/is-lambda@1.0.1",
        "pkg:npm/lru-cache@6.0.0",
        "pkg:npm/minipass-collect@1.0.2",
        "pkg:npm/minipass-fetch@1.4.1",
        "pkg:npm/minipass-flush@1.0.5",
        "pkg:npm/minipass-pipeline@1.2.4",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/negotiator@0.6.3",
        "pkg:npm/promise-retry@2.0.1",
        "pkg:npm/socks-proxy-agent@6.2.0",
        "pkg:npm/ssri@8.0.1"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@5.0.0",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/delegates@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.3.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.3.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/are-we-there-yet@3.0.0",
      "dependsOn": [
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/console-control-strings@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aproba@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-support@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-unicode@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@4.2.3",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wide-align@1.1.5",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/gauge@4.0.4",
      "dependsOn": [
        "pkg:npm/aproba@2.0.0",
        "pkg:npm/color-support@1.1.3",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wide-align@1.1.5"
      ]
    },
    {
      "ref": "pkg:npm/set-blocking@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npmlog@6.0.2",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@3.0.0",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@4.0.4",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/node-gyp@8.4.1",
      "dependsOn": [
        "pkg:npm/env-paths@2.2.1",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/make-fetch-happen@9.1.0",
        "pkg:npm/nopt@5.0.0",
        "pkg:npm/npmlog@6.0.2",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/tar@6.1.11",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/run-script@2.0.0",
      "dependsOn": [
        "pkg:npm/@npmcli/node-gyp@1.0.3",
        "pkg:npm/@npmcli/promise-spawn@1.3.2",
        "pkg:npm/node-gyp@8.4.1",
        "pkg:npm/read-package-json-fast@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ignore-walk@4.0.1",
      "dependsOn": [
        "pkg:npm/minimatch@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/npm-packlist@3.0.0",
      "dependsOn": [
        "pkg:npm/glob@7.2.3",
        "pkg:npm/ignore-walk@4.0.1",
        "pkg:npm/npm-bundled@1.1.2",
        "pkg:npm/npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/fs@2.1.0",
      "dependsOn": [
        "pkg:npm/@gar/promisify@1.1.3",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/move-file@2.0.0",
      "dependsOn": [
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/rimraf@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@7.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ssri@9.0.1",
      "dependsOn": [
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/cacache@16.1.0",
      "dependsOn": [
        "pkg:npm/@npmcli/fs@2.1.0",
        "pkg:npm/@npmcli/move-file@2.0.0",
        "pkg:npm/chownr@2.0.0",
        "pkg:npm/fs-minipass@2.1.0",
        "pkg:npm/glob@8.0.3",
        "pkg:npm/infer-owner@1.0.4",
        "pkg:npm/lru-cache@7.10.1",
        "pkg:npm/minipass-collect@1.0.2",
        "pkg:npm/minipass-flush@1.0.5",
        "pkg:npm/minipass-pipeline@1.2.4",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/p-map@4.0.0",
        "pkg:npm/promise-inflight@1.0.1",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/ssri@9.0.1",
        "pkg:npm/tar@6.1.11",
        "pkg:npm/unique-filename@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@tootallnate/once@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy-agent@5.0.0",
      "dependsOn": [
        "pkg:npm/@tootallnate/once@2.0.0",
        "pkg:npm/agent-base@6.0.2",
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/minipass-fetch@2.1.0",
      "dependsOn": [
        "pkg:npm/encoding@0.1.13",
        "pkg:npm/minipass-sized@1.0.3",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/minizlib@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/make-fetch-happen@10.1.6",
      "dependsOn": [
        "pkg:npm/agentkeepalive@4.2.1",
        "pkg:npm/cacache@16.1.0",
        "pkg:npm/http-cache-semantics@4.1.0",
        "pkg:npm/http-proxy-agent@5.0.0",
        "pkg:npm/https-proxy-agent@5.0.1",
        "pkg:npm/is-lambda@1.0.1",
        "pkg:npm/lru-cache@7.10.1",
        "pkg:npm/minipass-collect@1.0.2",
        "pkg:npm/minipass-fetch@2.1.0",
        "pkg:npm/minipass-flush@1.0.5",
        "pkg:npm/minipass-pipeline@1.2.4",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/negotiator@0.6.3",
        "pkg:npm/promise-retry@2.0.1",
        "pkg:npm/socks-proxy-agent@6.2.0",
        "pkg:npm/ssri@9.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jsonparse@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minipass-json-stream@1.0.1",
      "dependsOn": [
        "pkg:npm/jsonparse@1.3.1",
        "pkg:npm/minipass@3.1.6"
      ]
    },
    {
      "ref": "pkg:npm/npm-registry-fetch@12.0.2",
      "dependsOn": [
        "pkg:npm/make-fetch-happen@10.1.6",
        "pkg:npm/minipass-fetch@1.4.1",
        "pkg:npm/minipass-json-stream@1.0.1",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/minizlib@2.1.2",
        "pkg:npm/npm-package-arg@8.1.5"
      ]
    },
    {
      "ref": "pkg:npm/pacote@12.0.3",
      "dependsOn": [
        "pkg:npm/@npmcli/git@2.1.0",
        "pkg:npm/@npmcli/installed-package-contents@1.0.7",
        "pkg:npm/@npmcli/promise-spawn@1.3.2",
        "pkg:npm/@npmcli/run-script@2.0.0",
        "pkg:npm/cacache@15.3.0",
        "pkg:npm/chownr@2.0.0",
        "pkg:npm/fs-minipass@2.1.0",
        "pkg:npm/infer-owner@1.0.4",
        "pkg:npm/minipass@3.1.6",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/npm-package-arg@8.1.5",
        "pkg:npm/npm-packlist@3.0.0",
        "pkg:npm/npm-pick-manifest@6.1.1",
        "pkg:npm/npm-registry-fetch@12.0.2",
        "pkg:npm/promise-retry@2.0.1",
        "pkg:npm/read-package-json-fast@2.0.3",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/ssri@8.0.1",
        "pkg:npm/tar@6.1.11"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/metavuln-calculator@2.0.0",
      "dependsOn": [
        "pkg:npm/cacache@15.3.0",
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/pacote@12.0.3",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/@npmcli/package-json@1.0.1",
      "dependsOn": [
        "pkg:npm/json-parse-even-better-errors@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp-infer-owner@2.0.0",
      "dependsOn": [
        "pkg:npm/chownr@2.0.0",
        "pkg:npm/infer-owner@1.0.4",
        "pkg:npm/mkdirp@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/cmd-shim@5.0.0",
      "dependsOn": [
        "pkg:npm/mkdirp-infer-owner@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/read-cmd-shim@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/write-file-atomic@4.0.1",
      "dependsOn": [
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/bin-links@3.0.1",
      "dependsOn": [
        "pkg:npm/cmd-shim@5.0.0",
        "pkg:npm/mkdirp-infer-owner@2.0.0",
        "pkg:npm/npm-normalize-package-bin@1.0.1",
        "pkg:npm/read-cmd-shim@3.0.0",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/write-file-atomic@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/common-ancestor-path@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-nice@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/just-diff@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/just-diff-apply@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-conflict-json@2.0.2",
      "dependsOn": [
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/just-diff-apply@5.3.1",
        "pkg:npm/just-diff@5.0.2"
      ]
    },
    {
      "ref": "pkg:npm/proc-log@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-all-reject-late@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise-call-limit@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debuglog@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asap@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dezalgo@1.0.4",
      "dependsOn": [
        "pkg:npm/asap@2.0.6",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/readdir-scoped-modules@1.1.0",
      "dependsOn": [
        "pkg:npm/debuglog@1.0.1",
        "pkg:npm/dezalgo@1.0.4",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/treeverse@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/walk-up-path@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@npmcli/arborist@4.3.1",
      "dependsOn": [
        "pkg:npm/@isaacs/string-locale-compare@1.1.0",
        "pkg:npm/@npmcli/installed-package-contents@1.0.7",
        "pkg:npm/@npmcli/map-workspaces@2.0.3",
        "pkg:npm/@npmcli/metavuln-calculator@2.0.0",
        "pkg:npm/@npmcli/move-file@1.1.2",
        "pkg:npm/@npmcli/name-from-folder@1.0.1",
        "pkg:npm/@npmcli/node-gyp@1.0.3",
        "pkg:npm/@npmcli/package-json@1.0.1",
        "pkg:npm/@npmcli/run-script@2.0.0",
        "pkg:npm/bin-links@3.0.1",
        "pkg:npm/cacache@15.3.0",
        "pkg:npm/common-ancestor-path@1.0.1",
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/json-stringify-nice@1.1.4",
        "pkg:npm/mkdirp-infer-owner@2.0.0",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/npm-install-checks@4.0.0",
        "pkg:npm/npm-package-arg@8.1.5",
        "pkg:npm/npm-pick-manifest@6.1.1",
        "pkg:npm/npm-registry-fetch@12.0.2",
        "pkg:npm/pacote@12.0.3",
        "pkg:npm/parse-conflict-json@2.0.2",
        "pkg:npm/proc-log@1.0.0",
        "pkg:npm/promise-all-reject-late@1.0.1",
        "pkg:npm/promise-call-limit@1.0.1",
        "pkg:npm/read-package-json-fast@2.0.3",
        "pkg:npm/readdir-scoped-modules@1.1.0",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/ssri@8.0.1",
        "pkg:npm/treeverse@1.0.4",
        "pkg:npm/walk-up-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/are-we-there-yet@2.0.0",
      "dependsOn": [
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/arrify@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/binaryextensions@4.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@4.1.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cli-table@0.3.11",
      "dependsOn": [
        "pkg:npm/colors@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/commander@7.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dateformat@4.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error@10.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.3",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@6.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/human-signals@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-stream@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@4.0.1",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@5.1.2",
      "dependsOn": [
        "pkg:npm/mimic-fn@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-final-newline@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@5.1.1",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/get-stream@6.0.1",
        "pkg:npm/human-signals@2.1.0",
        "pkg:npm/is-stream@2.0.1",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/npm-run-path@4.0.1",
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/strip-final-newline@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yocto-queue@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@3.1.0",
      "dependsOn": [
        "pkg:npm/yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@5.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@6.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@5.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@6.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/array-union@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-type@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dir-glob@3.0.1",
      "dependsOn": [
        "pkg:npm/path-type@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/queue-microtask@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-parallel@1.2.0",
      "dependsOn": [
        "pkg:npm/queue-microtask@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/run-parallel@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/reusify@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastq@1.13.0",
      "dependsOn": [
        "pkg:npm/reusify@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.scandir@2.1.5",
        "pkg:npm/fastq@1.13.0"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.3",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/merge2@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@7.0.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.2",
      "dependsOn": [
        "pkg:npm/fill-range@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/picomatch@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/micromatch@4.0.5",
      "dependsOn": [
        "pkg:npm/braces@3.0.2",
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/fast-glob@3.2.11",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/@nodelib/fs.walk@1.2.8",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/micromatch@4.0.5"
      ]
    },
    {
      "ref": "pkg:npm/ignore@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slash@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globby@11.1.0",
      "dependsOn": [
        "pkg:npm/array-union@2.1.0",
        "pkg:npm/dir-glob@3.0.1",
        "pkg:npm/fast-glob@3.2.11",
        "pkg:npm/ignore@5.2.0",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/grouped-queue@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.21.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@4.3.2",
      "dependsOn": [
        "pkg:npm/type-fest@0.21.3"
      ]
    },
    {
      "ref": "pkg:npm/restore-cursor@3.1.0",
      "dependsOn": [
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/cli-cursor@3.1.0",
      "dependsOn": [
        "pkg:npm/restore-cursor@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-width@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chardet@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.24",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/os-tmpdir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.33",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/external-editor@3.1.0",
      "dependsOn": [
        "pkg:npm/chardet@0.7.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/tmp@0.0.33"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/figures@3.2.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@5.7.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/bl@4.1.0",
      "dependsOn": [
        "pkg:npm/buffer@5.7.1",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/cli-spinners@2.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-interactive@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unicode-supported@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-symbols@4.1.0",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/is-unicode-supported@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/clone@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defaults@1.0.3",
      "dependsOn": [
        "pkg:npm/clone@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/wcwidth@1.0.1",
      "dependsOn": [
        "pkg:npm/defaults@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ora@5.4.1",
      "dependsOn": [
        "pkg:npm/bl@4.1.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-cursor@3.1.0",
        "pkg:npm/cli-spinners@2.6.1",
        "pkg:npm/is-interactive@1.0.0",
        "pkg:npm/is-unicode-supported@0.1.0",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wcwidth@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/run-async@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rxjs@7.5.5",
      "dependsOn": [
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inquirer@8.2.4",
      "dependsOn": [
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-cursor@3.1.0",
        "pkg:npm/cli-width@3.0.0",
        "pkg:npm/external-editor@3.1.0",
        "pkg:npm/figures@3.2.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/mute-stream@0.0.8",
        "pkg:npm/ora@5.4.1",
        "pkg:npm/run-async@2.4.1",
        "pkg:npm/rxjs@7.5.5",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/through@2.3.8",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/scoped-regex@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-scoped@2.1.0",
      "dependsOn": [
        "pkg:npm/scoped-regex@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/isbinaryfile@4.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@15.14.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/expect@1.20.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/vinyl@2.0.6",
      "dependsOn": [
        "pkg:npm/@types/expect@1.20.4",
        "pkg:npm/@types/node@15.14.9"
      ]
    },
    {
      "ref": "pkg:npm/clone@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-buffer@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.7",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/core-util-is@1.0.3",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.1",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cloneable-readable@1.1.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/process-nextick-args@2.0.1",
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/replace-ext@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@2.2.1",
      "dependsOn": [
        "pkg:npm/clone-buffer@1.0.0",
        "pkg:npm/clone-stats@1.0.0",
        "pkg:npm/clone@2.1.2",
        "pkg:npm/cloneable-readable@1.1.3",
        "pkg:npm/remove-trailing-separator@1.1.0",
        "pkg:npm/replace-ext@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom-buf@1.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@2.0.0",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-bom-stream@2.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@2.0.0",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-file@3.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/strip-bom-buf@1.0.0",
        "pkg:npm/strip-bom-stream@2.0.0",
        "pkg:npm/vinyl@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/mem-fs@2.2.1",
      "dependsOn": [
        "pkg:npm/@types/node@15.14.9",
        "pkg:npm/@types/vinyl@2.0.6",
        "pkg:npm/vinyl-file@3.0.0",
        "pkg:npm/vinyl@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@3.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filelist@1.0.4",
      "dependsOn": [
        "pkg:npm/minimatch@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jake@10.8.5",
      "dependsOn": [
        "pkg:npm/async@3.2.3",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/filelist@1.0.4",
        "pkg:npm/minimatch@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ejs@3.1.8",
      "dependsOn": [
        "pkg:npm/jake@10.8.5"
      ]
    },
    {
      "ref": "pkg:npm/@types/minimatch@3.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-differ@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/multimatch@5.0.0",
      "dependsOn": [
        "pkg:npm/@types/minimatch@3.0.5",
        "pkg:npm/array-differ@3.0.0",
        "pkg:npm/array-union@2.1.0",
        "pkg:npm/arrify@2.0.1",
        "pkg:npm/minimatch@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/normalize-path@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/textextensions@5.15.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mem-fs-editor@9.4.0",
      "dependsOn": [
        "pkg:npm/binaryextensions@4.18.0",
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ejs@3.1.8",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/isbinaryfile@4.0.10",
        "pkg:npm/mem-fs@2.2.1",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/multimatch@5.0.0",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/textextensions@5.15.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gauge@3.0.2",
      "dependsOn": [
        "pkg:npm/aproba@2.0.0",
        "pkg:npm/color-support@1.1.3",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wide-align@1.1.5"
      ]
    },
    {
      "ref": "pkg:npm/npmlog@5.0.1",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@2.0.0",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@3.0.2",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eventemitter3@4.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-finally@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-timeout@3.2.0",
      "dependsOn": [
        "pkg:npm/p-finally@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-queue@6.6.2",
      "dependsOn": [
        "pkg:npm/eventemitter3@4.0.7",
        "pkg:npm/p-timeout@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-transform@1.3.0",
      "dependsOn": [
        "pkg:npm/debug@4.3.4",
        "pkg:npm/p-queue@6.6.2"
      ]
    },
    {
      "ref": "pkg:npm/p-try@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.3.0",
      "dependsOn": [
        "pkg:npm/p-try@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@4.1.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@5.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@4.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@5.0.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@4.2.0",
      "dependsOn": [
        "pkg:npm/find-up@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-yarn-workspace-root2@1.2.16",
      "dependsOn": [
        "pkg:npm/micromatch@4.0.5",
        "pkg:npm/pkg-dir@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.1",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/load-yaml-file@0.2.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-pm@2.0.0",
      "dependsOn": [
        "pkg:npm/load-yaml-file@0.2.0",
        "pkg:npm/path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/preferred-pm@3.0.3",
      "dependsOn": [
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/find-yarn-workspace-root2@1.2.16",
        "pkg:npm/path-exists@4.0.0",
        "pkg:npm/which-pm@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-bytes@5.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/event-target-shim@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/abort-controller@3.0.0",
      "dependsOn": [
        "pkg:npm/event-target-shim@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/buffer@6.0.3",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/events@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process@0.11.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@4.3.0",
      "dependsOn": [
        "pkg:npm/abort-controller@3.0.0",
        "pkg:npm/buffer@6.0.3",
        "pkg:npm/events@3.3.0",
        "pkg:npm/process@0.11.10"
      ]
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/untildify@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcov-parse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-driver@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/extend@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.3.3",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1",
        "pkg:npm/punycode@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@6.12.6",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-json-stable-stringify@2.1.0",
        "pkg:npm/json-schema-traverse@0.4.1",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.1.5",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.2",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.4.0",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.6",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.17.0",
      "dependsOn": [
        "pkg:npm/asn1@0.2.6",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.2",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.2",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/safer-buffer@2.1.2",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.2",
        "pkg:npm/sshpk@1.17.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.5.0",
      "dependsOn": [
        "pkg:npm/psl@1.8.0",
        "pkg:npm/psl@1.9.0",
        "pkg:npm/punycode@2.1.1",
        "pkg:npm/punycode@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.88.2",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.11.0",
        "pkg:npm/aws4@1.12.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/extend@3.0.2",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.3",
        "pkg:npm/har-validator@5.1.5",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/oauth-sign@0.9.0",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.3",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/tough-cookie@2.5.0",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/coveralls@3.1.1",
      "dependsOn": [
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/lcov-parse@1.0.0",
        "pkg:npm/log-driver@1.2.7",
        "pkg:npm/minimist@1.2.6",
        "pkg:npm/request@2.88.2"
      ]
    },
    {
      "ref": "pkg:npm/universalify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@6.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@10.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/parser@7.18.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/linkify-it@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/mdurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/markdown-it@12.2.3",
      "dependsOn": [
        "pkg:npm/@types/linkify-it@3.0.2",
        "pkg:npm/@types/mdurl@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/bluebird@3.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/catharsis@0.9.0",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlcreate@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js2xmlparser@4.0.2",
      "dependsOn": [
        "pkg:npm/xmlcreate@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/klaw@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uc.micro@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/linkify-it@3.0.3",
      "dependsOn": [
        "pkg:npm/uc.micro@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/mdurl@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/markdown-it@12.3.2",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1",
        "pkg:npm/entities@2.1.0",
        "pkg:npm/linkify-it@3.0.3",
        "pkg:npm/mdurl@1.0.1",
        "pkg:npm/uc.micro@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/markdown-it-anchor@8.6.4",
      "dependsOn": [
        "pkg:npm/@types/markdown-it@12.2.3",
        "pkg:npm/markdown-it@12.3.2"
      ]
    },
    {
      "ref": "pkg:npm/marked@4.0.16",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requizzle@0.2.3",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/strip-json-comments@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/taffydb@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.13.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdoc@3.6.10",
      "dependsOn": [
        "pkg:npm/@babel/parser@7.18.3",
        "pkg:npm/@types/markdown-it@12.2.3",
        "pkg:npm/bluebird@3.7.2",
        "pkg:npm/catharsis@0.9.0",
        "pkg:npm/escape-string-regexp@2.0.0",
        "pkg:npm/js2xmlparser@4.0.2",
        "pkg:npm/klaw@4.0.1",
        "pkg:npm/markdown-it-anchor@8.6.4",
        "pkg:npm/markdown-it@12.3.2",
        "pkg:npm/marked@4.0.16",
        "pkg:npm/mkdirp@1.0.4",
        "pkg:npm/requizzle@0.2.3",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/taffydb@2.6.2",
        "pkg:npm/underscore@1.13.3"
      ]
    },
    {
      "ref": "pkg:npm/@ungap/promise-all-settled@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-colors@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-stdout@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/anymatch@3.1.2",
      "dependsOn": [
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@2.1.0",
      "dependsOn": [
        "pkg:npm/binary-extensions@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@3.6.0",
      "dependsOn": [
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chokidar@3.5.3",
      "dependsOn": [
        "pkg:npm/anymatch@3.1.2",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/is-binary-path@2.1.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/readdirp@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.3.3",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/diff@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.0",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/he@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@4.1.0",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@4.2.1",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nanoid@3.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.1.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/serialize-javascript@6.0.0",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@8.1.1",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/workerpool@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@7.0.4",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/escalade@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-caller-file@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@5.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@20.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@16.2.0",
      "dependsOn": [
        "pkg:npm/cliui@7.0.4",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/y18n@5.0.8",
        "pkg:npm/yargs-parser@20.2.4"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flat@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-obj@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-unparser@2.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/decamelize@4.0.0",
        "pkg:npm/flat@5.0.2",
        "pkg:npm/is-plain-obj@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mocha@9.2.2",
      "dependsOn": [
        "pkg:npm/@ungap/promise-all-settled@1.1.2",
        "pkg:npm/ansi-colors@4.1.1",
        "pkg:npm/browser-stdout@1.3.1",
        "pkg:npm/chokidar@3.5.3",
        "pkg:npm/debug@4.3.3",
        "pkg:npm/diff@5.0.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/glob@7.2.0",
        "pkg:npm/growl@1.10.5",
        "pkg:npm/he@1.2.0",
        "pkg:npm/js-yaml@4.1.0",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/minimatch@4.2.1",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/nanoid@3.3.1",
        "pkg:npm/serialize-javascript@6.0.0",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/which@2.0.2",
        "pkg:npm/workerpool@6.2.0",
        "pkg:npm/yargs-parser@20.2.4",
        "pkg:npm/yargs-unparser@2.0.0",
        "pkg:npm/yargs@16.2.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@5.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-package-type@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-from@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/find-up@4.1.0",
        "pkg:npm/get-package-type@0.1.0",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/resolve-from@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@istanbuljs/schema@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hasha@5.2.2",
      "dependsOn": [
        "pkg:npm/is-stream@2.0.1",
        "pkg:npm/type-fest@0.8.1"
      ]
    },
    {
      "ref": "pkg:npm/semver@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@3.1.0",
      "dependsOn": [
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.flattendeep@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es6-error@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/release-zalgo@1.0.0",
      "dependsOn": [
        "pkg:npm/es6-error@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/package-hash@4.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/hasha@5.2.2",
        "pkg:npm/lodash.flattendeep@4.4.0",
        "pkg:npm/release-zalgo@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/typedarray-to-buffer@3.1.5",
      "dependsOn": [
        "pkg:npm/is-typedarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/write-file-atomic@3.0.3",
      "dependsOn": [
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/typedarray-to-buffer@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/caching-transform@4.0.0",
      "dependsOn": [
        "pkg:npm/hasha@5.2.2",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/package-hash@4.0.0",
        "pkg:npm/write-file-atomic@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@1.8.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-cache-dir@3.3.2",
      "dependsOn": [
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/pkg-dir@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/foreground-child@2.0.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/default-require-extensions@3.0.0",
      "dependsOn": [
        "pkg:npm/strip-bom@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/append-transform@2.0.0",
      "dependsOn": [
        "pkg:npm/default-require-extensions@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-hook@3.0.0",
      "dependsOn": [
        "pkg:npm/append-transform@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.1.1",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.1",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.13"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.13",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.0.7",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.13"
      ]
    },
    {
      "ref": "pkg:npm/@ampproject/remapping@2.2.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.1.1",
        "pkg:npm/@jridgewell/trace-mapping@0.3.13"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.16.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.17.12",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.16.7",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.17.12"
      ]
    },
    {
      "ref": "pkg:npm/to-fast-properties@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/types@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.16.7",
        "pkg:npm/to-fast-properties@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.1",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.1",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.13",
        "pkg:npm/@jridgewell/trace-mapping@0.3.13"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/generator@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.2",
        "pkg:npm/@jridgewell/gen-mapping@0.3.1",
        "pkg:npm/jsesc@2.5.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/compat-data@7.17.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-option@7.16.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001344",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.4.140",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-releases@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picocolors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserslist@4.20.3",
      "dependsOn": [
        "pkg:npm/caniuse-lite@1.0.30001344",
        "pkg:npm/electron-to-chromium@1.4.140",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/node-releases@2.0.5",
        "pkg:npm/picocolors@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-compilation-targets@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.17.10",
        "pkg:npm/@babel/core@7.18.2",
        "pkg:npm/@babel/helper-validator-option@7.16.7",
        "pkg:npm/browserslist@4.20.3",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-environment-visitor@7.18.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-module-imports@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-simple-access@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-split-export-declaration@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/template@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.16.7",
        "pkg:npm/@babel/parser@7.18.3",
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-function-name@7.17.9",
      "dependsOn": [
        "pkg:npm/@babel/template@7.16.7",
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-hoist-variables@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/globals@11.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/traverse@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.16.7",
        "pkg:npm/@babel/generator@7.18.2",
        "pkg:npm/@babel/helper-environment-visitor@7.18.2",
        "pkg:npm/@babel/helper-function-name@7.17.9",
        "pkg:npm/@babel/helper-hoist-variables@7.16.7",
        "pkg:npm/@babel/helper-split-export-declaration@7.16.7",
        "pkg:npm/@babel/parser@7.18.3",
        "pkg:npm/@babel/types@7.18.2",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/globals@11.12.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-module-transforms@7.18.0",
      "dependsOn": [
        "pkg:npm/@babel/helper-environment-visitor@7.18.2",
        "pkg:npm/@babel/helper-module-imports@7.16.7",
        "pkg:npm/@babel/helper-simple-access@7.18.2",
        "pkg:npm/@babel/helper-split-export-declaration@7.16.7",
        "pkg:npm/@babel/helper-validator-identifier@7.16.7",
        "pkg:npm/@babel/template@7.16.7",
        "pkg:npm/@babel/traverse@7.18.2",
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helpers@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/template@7.16.7",
        "pkg:npm/@babel/traverse@7.18.2",
        "pkg:npm/@babel/types@7.18.2"
      ]
    },
    {
      "ref": "pkg:npm/gensync@1.0.0-beta.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/core@7.18.2",
      "dependsOn": [
        "pkg:npm/@ampproject/remapping@2.2.0",
        "pkg:npm/@babel/code-frame@7.16.7",
        "pkg:npm/@babel/generator@7.18.2",
        "pkg:npm/@babel/helper-compilation-targets@7.18.2",
        "pkg:npm/@babel/helper-module-transforms@7.18.0",
        "pkg:npm/@babel/helpers@7.18.2",
        "pkg:npm/@babel/parser@7.18.3",
        "pkg:npm/@babel/template@7.16.7",
        "pkg:npm/@babel/traverse@7.18.2",
        "pkg:npm/@babel/types@7.18.2",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/gensync@1.0.0-beta.2",
        "pkg:npm/json5@2.2.1",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.2",
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/istanbul-lib-coverage@3.2.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/archy@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-map@3.0.0",
      "dependsOn": [
        "pkg:npm/aggregate-error@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-processinfo@2.0.2",
      "dependsOn": [
        "pkg:npm/archy@1.0.0",
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/istanbul-lib-coverage@3.2.0",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/p-map@3.0.0",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/uuid@3.4.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@3.0.0",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@3.2.0",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "dependsOn": [
        "pkg:npm/debug@4.3.4",
        "pkg:npm/istanbul-lib-coverage@3.2.0",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/html-escaper@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-reports@3.1.4",
      "dependsOn": [
        "pkg:npm/html-escaper@2.0.2",
        "pkg:npm/istanbul-lib-report@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fromentries@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-on-spawn@1.0.0",
      "dependsOn": [
        "pkg:npm/fromentries@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/node-preload@0.2.1",
      "dependsOn": [
        "pkg:npm/process-on-spawn@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spawn-wrap@2.0.0",
      "dependsOn": [
        "pkg:npm/foreground-child@2.0.0",
        "pkg:npm/is-windows@1.0.2",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/test-exclude@6.0.0",
      "dependsOn": [
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/minimatch@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@6.2.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cliui@6.0.0",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wrap-ansi@6.2.0"
      ]
    },
    {
      "ref": "pkg:npm/require-main-filename@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which-module@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@18.1.3",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/decamelize@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@15.4.1",
      "dependsOn": [
        "pkg:npm/cliui@6.0.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/find-up@4.1.0",
        "pkg:npm/get-caller-file@2.0.5",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@2.0.0",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/which-module@2.0.0",
        "pkg:npm/y18n@4.0.3",
        "pkg:npm/yargs-parser@18.1.3"
      ]
    },
    {
      "ref": "pkg:npm/nyc@15.1.0",
      "dependsOn": [
        "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
        "pkg:npm/@istanbuljs/schema@0.1.3",
        "pkg:npm/caching-transform@4.0.0",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/find-cache-dir@3.3.2",
        "pkg:npm/find-up@4.1.0",
        "pkg:npm/foreground-child@2.0.0",
        "pkg:npm/get-package-type@0.1.0",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/istanbul-lib-coverage@3.2.0",
        "pkg:npm/istanbul-lib-hook@3.0.0",
        "pkg:npm/istanbul-lib-instrument@4.0.3",
        "pkg:npm/istanbul-lib-processinfo@2.0.2",
        "pkg:npm/istanbul-lib-report@3.0.0",
        "pkg:npm/istanbul-lib-source-maps@4.0.1",
        "pkg:npm/istanbul-reports@3.1.4",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/node-preload@0.2.1",
        "pkg:npm/p-map@3.0.0",
        "pkg:npm/process-on-spawn@1.0.0",
        "pkg:npm/resolve-from@5.0.0",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/spawn-wrap@2.0.0",
        "pkg:npm/test-exclude@6.0.0",
        "pkg:npm/yargs@15.4.1"
      ]
    },
    {
      "ref": "pkg:npm/prettier@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-object@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-keys@1.0.2",
      "dependsOn": [
        "pkg:npm/is-object@1.0.2",
        "pkg:npm/merge-descriptors@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/module-not-found-error@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.9.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.22.0",
      "dependsOn": [
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/proxyquire@2.1.3",
      "dependsOn": [
        "pkg:npm/fill-keys@1.0.2",
        "pkg:npm/module-not-found-error@1.0.1",
        "pkg:npm/resolve@1.22.0"
      ]
    },
    {
      "ref": "pkg:npm/type-detect@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@sinonjs/commons@1.8.3",
      "dependsOn": [
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/@sinonjs/fake-timers@7.1.2",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash.get@4.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@sinonjs/samsam@6.1.1",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/@sinonjs/text-encoding@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/just-extend@4.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@1.8.0",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nise@5.1.1",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3",
        "pkg:npm/@sinonjs/fake-timers@7.1.2",
        "pkg:npm/@sinonjs/text-encoding@0.7.1",
        "pkg:npm/just-extend@4.2.1",
        "pkg:npm/path-to-regexp@1.8.0"
      ]
    },
    {
      "ref": "pkg:npm/sinon@11.1.2",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3",
        "pkg:npm/@sinonjs/fake-timers@7.1.2",
        "pkg:npm/@sinonjs/samsam@6.1.1",
        "pkg:npm/diff@5.1.0",
        "pkg:npm/nise@5.1.1",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/sinon-test@3.1.3",
      "dependsOn": [
        "pkg:npm/sinon@11.1.2"
      ]
    },
    {
      "ref": "pkg:npm/boolbase@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.1.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.1",
        "pkg:npm/entities@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.5.1",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.0.1",
        "pkg:npm/dom-serializer@0.1.1",
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/domelementtype@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@1.0.2",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@1.2.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@2.1.3",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/nth-check@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.4.2",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.10.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.1",
        "pkg:npm/domhandler@2.4.2",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.1.2",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/lodash.assignin@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.bind@4.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.defaults@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.filter@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.flatten@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.foreach@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.map@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.merge@4.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.pick@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.reduce@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.reject@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.some@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cheerio@0.22.0",
      "dependsOn": [
        "pkg:npm/css-select@1.2.0",
        "pkg:npm/dom-serializer@0.1.1",
        "pkg:npm/entities@1.1.2",
        "pkg:npm/htmlparser2@3.10.1",
        "pkg:npm/lodash.assignin@4.2.0",
        "pkg:npm/lodash.bind@4.2.1",
        "pkg:npm/lodash.defaults@4.2.0",
        "pkg:npm/lodash.filter@4.6.0",
        "pkg:npm/lodash.flatten@4.4.0",
        "pkg:npm/lodash.foreach@4.5.0",
        "pkg:npm/lodash.map@4.6.0",
        "pkg:npm/lodash.merge@4.6.2",
        "pkg:npm/lodash.pick@4.4.0",
        "pkg:npm/lodash.reduce@4.6.0",
        "pkg:npm/lodash.reject@4.6.0",
        "pkg:npm/lodash.some@4.6.0"
      ]
    },
    {
      "ref": "pkg:npm/tui-jsdoc-template@1.2.2",
      "dependsOn": [
        "pkg:npm/cheerio@0.22.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.12.11",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.17.12"
      ]
    },
    {
      "ref": "pkg:npm/acorn@7.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-jsx@5.3.2",
      "dependsOn": [
        "pkg:npm/acorn@7.4.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-visitor-keys@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/espree@7.3.1",
      "dependsOn": [
        "pkg:npm/acorn-jsx@5.3.2",
        "pkg:npm/acorn@7.4.1",
        "pkg:npm/eslint-visitor-keys@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/type-fest@0.20.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@13.15.0",
      "dependsOn": [
        "pkg:npm/type-fest@0.20.2"
      ]
    },
    {
      "ref": "pkg:npm/ignore@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsites@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parent-module@1.0.1",
      "dependsOn": [
        "pkg:npm/callsites@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/import-fresh@3.3.0",
      "dependsOn": [
        "pkg:npm/parent-module@1.0.1",
        "pkg:npm/resolve-from@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@eslint/eslintrc@0.4.3",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/espree@7.3.1",
        "pkg:npm/globals@13.15.0",
        "pkg:npm/ignore@4.0.6",
        "pkg:npm/import-fresh@3.3.0",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/strip-json-comments@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@humanwhocodes/object-schema@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@humanwhocodes/config-array@0.5.0",
      "dependsOn": [
        "pkg:npm/@humanwhocodes/object-schema@1.2.1",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/minimatch@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@3.0.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/enquirer@2.3.6",
      "dependsOn": [
        "pkg:npm/ansi-colors@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@4.3.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-scope@5.1.1",
      "dependsOn": [
        "pkg:npm/esrecurse@4.3.0",
        "pkg:npm/estraverse@4.3.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-utils@2.1.0",
      "dependsOn": [
        "pkg:npm/eslint-visitor-keys@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-visitor-keys@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esquery@1.4.0",
      "dependsOn": [
        "pkg:npm/estraverse@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/flatted@3.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/flat-cache@3.0.4",
      "dependsOn": [
        "pkg:npm/flatted@3.2.5",
        "pkg:npm/rimraf@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/file-entry-cache@6.0.1",
      "dependsOn": [
        "pkg:npm/flat-cache@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prelude-ls@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.4.0",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.4.1",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/natural-compare@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/word-wrap@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.9.1",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.4",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/prelude-ls@1.2.1",
        "pkg:npm/type-check@0.4.0",
        "pkg:npm/word-wrap@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/progress@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regexpp@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-from-string@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@8.11.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/json-schema-traverse@1.0.0",
        "pkg:npm/require-from-string@2.0.2",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.truncate@4.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/astral-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/astral-regex@2.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/table@6.8.0",
      "dependsOn": [
        "pkg:npm/ajv@8.11.0",
        "pkg:npm/lodash.truncate@4.4.2",
        "pkg:npm/slice-ansi@4.0.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/v8-compile-cache@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint@7.32.0",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.12.11",
        "pkg:npm/@eslint/eslintrc@0.4.3",
        "pkg:npm/@humanwhocodes/config-array@0.5.0",
        "pkg:npm/ajv@6.12.6",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/doctrine@3.0.0",
        "pkg:npm/enquirer@2.3.6",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/eslint-utils@2.1.0",
        "pkg:npm/eslint-visitor-keys@2.1.0",
        "pkg:npm/espree@7.3.1",
        "pkg:npm/esquery@1.4.0",
        "pkg:npm/esutils@2.0.3",
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/file-entry-cache@6.0.1",
        "pkg:npm/functional-red-black-tree@1.0.1",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/globals@13.15.0",
        "pkg:npm/ignore@4.0.6",
        "pkg:npm/import-fresh@3.3.0",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
        "pkg:npm/levn@0.4.1",
        "pkg:npm/lodash.merge@4.6.2",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/optionator@0.9.1",
        "pkg:npm/progress@2.0.3",
        "pkg:npm/regexpp@3.2.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/strip-json-comments@3.1.1",
        "pkg:npm/table@6.8.0",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/v8-compile-cache@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/types@4.33.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@typescript-eslint/visitor-keys@4.33.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/types@4.33.0",
        "pkg:npm/eslint-visitor-keys@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/scope-manager@4.33.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/types@4.33.0",
        "pkg:npm/@typescript-eslint/visitor-keys@4.33.0"
      ]
    },
    {
      "ref": "pkg:npm/typescript@4.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@1.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsutils@3.21.0",
      "dependsOn": [
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/typescript@4.7.2"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/typescript-estree@4.33.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/types@4.33.0",
        "pkg:npm/@typescript-eslint/visitor-keys@4.33.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/tsutils@3.21.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/parser@4.33.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/scope-manager@4.33.0",
        "pkg:npm/@typescript-eslint/types@4.33.0",
        "pkg:npm/@typescript-eslint/typescript-estree@4.33.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/eslint@7.32.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/json-schema@7.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-utils@3.0.0",
      "dependsOn": [
        "pkg:npm/eslint-visitor-keys@2.1.0",
        "pkg:npm/eslint@7.32.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/experimental-utils@4.33.0",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.11",
        "pkg:npm/@typescript-eslint/scope-manager@4.33.0",
        "pkg:npm/@typescript-eslint/types@4.33.0",
        "pkg:npm/@typescript-eslint/typescript-estree@4.33.0",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/eslint-utils@3.0.0",
        "pkg:npm/eslint@7.32.0"
      ]
    },
    {
      "ref": "pkg:npm/@typescript-eslint/eslint-plugin@4.33.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/experimental-utils@4.33.0",
        "pkg:npm/@typescript-eslint/parser@4.33.0",
        "pkg:npm/@typescript-eslint/scope-manager@4.33.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/functional-red-black-tree@1.0.1",
        "pkg:npm/ignore@5.2.0",
        "pkg:npm/regexpp@3.2.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/tsutils@3.21.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/parse-json@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/lines-and-columns@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-json@5.2.0",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.16.7",
        "pkg:npm/error-ex@1.3.2",
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/lines-and-columns@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/yaml@1.10.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cosmiconfig@7.0.1",
      "dependsOn": [
        "pkg:npm/@types/parse-json@4.0.0",
        "pkg:npm/import-fresh@3.3.0",
        "pkg:npm/parse-json@5.2.0",
        "pkg:npm/path-type@4.0.0",
        "pkg:npm/yaml@1.10.2"
      ]
    },
    {
      "ref": "pkg:npm/eslint-config-prettier@7.2.0",
      "dependsOn": [
        "pkg:npm/eslint@7.32.0"
      ]
    },
    {
      "ref": "pkg:npm/confusing-browser-globals@1.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-config-xo@0.34.0",
      "dependsOn": [
        "pkg:npm/confusing-browser-globals@1.0.10",
        "pkg:npm/eslint@7.32.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-config-xo-typescript@0.37.0",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/eslint-plugin@4.33.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/typescript@4.7.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/estree@0.0.51",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/eslint@7.29.0",
      "dependsOn": [
        "pkg:npm/@types/estree@0.0.51",
        "pkg:npm/@types/json-schema@7.0.11"
      ]
    },
    {
      "ref": "pkg:npm/eslint-rule-docs@1.1.232",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/irregular-plurals@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/plur@4.0.0",
      "dependsOn": [
        "pkg:npm/irregular-plurals@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-hyperlinks@2.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-formatter-pretty@4.1.0",
      "dependsOn": [
        "pkg:npm/@types/eslint@7.29.0",
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/eslint-rule-docs@1.1.232",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/plur@4.0.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/supports-hyperlinks@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.1.1",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/get-intrinsic@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/has-property-descriptors@1.0.0",
      "dependsOn": [
        "pkg:npm/get-intrinsic@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object-keys@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.4",
      "dependsOn": [
        "pkg:npm/has-property-descriptors@1.0.0",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-callable@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-tostringtag@1.0.0",
      "dependsOn": [
        "pkg:npm/has-symbols@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.5",
      "dependsOn": [
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.4",
      "dependsOn": [
        "pkg:npm/has-symbols@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.2.1",
      "dependsOn": [
        "pkg:npm/is-callable@1.2.4",
        "pkg:npm/is-date-object@1.0.5",
        "pkg:npm/is-symbol@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/functions-have-names@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function.prototype.name@1.1.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/es-abstract@1.20.1",
        "pkg:npm/functions-have-names@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/get-symbol-description@1.0.0",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/get-intrinsic@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/object-inspect@1.12.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/object-inspect@1.12.2"
      ]
    },
    {
      "ref": "pkg:npm/internal-slot@1.0.3",
      "dependsOn": [
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/has@1.0.3",
        "pkg:npm/side-channel@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/is-negative-zero@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-regex@1.1.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-shared-array-buffer@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-string@1.0.7",
      "dependsOn": [
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-weakref@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.assign@4.1.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/object-keys@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/regexp.prototype.flags@1.4.3",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/functions-have-names@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trimend@1.0.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/es-abstract@1.20.1"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.trimstart@1.0.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/es-abstract@1.20.1"
      ]
    },
    {
      "ref": "pkg:npm/has-bigints@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-bigint@1.0.4",
      "dependsOn": [
        "pkg:npm/has-bigints@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-boolean-object@1.1.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-number-object@1.0.7",
      "dependsOn": [
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-boxed-primitive@1.0.2",
      "dependsOn": [
        "pkg:npm/is-bigint@1.0.4",
        "pkg:npm/is-boolean-object@1.1.2",
        "pkg:npm/is-number-object@1.0.7",
        "pkg:npm/is-string@1.0.7",
        "pkg:npm/is-symbol@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/unbox-primitive@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/has-bigints@1.0.2",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/which-boxed-primitive@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.20.1",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/es-to-primitive@1.2.1",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/function.prototype.name@1.1.5",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/get-symbol-description@1.0.0",
        "pkg:npm/has-property-descriptors@1.0.0",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/has@1.0.3",
        "pkg:npm/internal-slot@1.0.3",
        "pkg:npm/is-callable@1.2.4",
        "pkg:npm/is-negative-zero@2.0.2",
        "pkg:npm/is-regex@1.1.4",
        "pkg:npm/is-shared-array-buffer@1.0.2",
        "pkg:npm/is-string@1.0.7",
        "pkg:npm/is-weakref@1.0.2",
        "pkg:npm/object-inspect@1.12.2",
        "pkg:npm/object-keys@1.1.1",
        "pkg:npm/object.assign@4.1.2",
        "pkg:npm/regexp.prototype.flags@1.4.3",
        "pkg:npm/string.prototype.trimend@1.0.5",
        "pkg:npm/string.prototype.trimstart@1.0.5",
        "pkg:npm/unbox-primitive@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/array-includes@3.1.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/es-abstract@1.20.1",
        "pkg:npm/get-intrinsic@1.1.1",
        "pkg:npm/is-string@1.0.7"
      ]
    },
    {
      "ref": "pkg:npm/es-shim-unscopables@1.0.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/array.prototype.flat@1.3.0",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/es-abstract@1.20.1",
        "pkg:npm/es-shim-unscopables@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/doctrine@2.1.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/debug@3.2.7",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/eslint-import-resolver-node@0.3.6",
      "dependsOn": [
        "pkg:npm/debug@3.2.7",
        "pkg:npm/resolve@1.22.0"
      ]
    },
    {
      "ref": "pkg:npm/p-try@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@1.3.0",
      "dependsOn": [
        "pkg:npm/p-try@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@2.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@2.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@2.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-module-utils@2.7.3",
      "dependsOn": [
        "pkg:npm/debug@3.2.7",
        "pkg:npm/find-up@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/object.values@1.1.5",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/define-properties@1.1.4",
        "pkg:npm/es-abstract@1.20.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/json5@0.0.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@1.0.1",
      "dependsOn": [
        "pkg:npm/minimist@1.2.6"
      ]
    },
    {
      "ref": "pkg:npm/tsconfig-paths@3.14.1",
      "dependsOn": [
        "pkg:npm/@types/json5@0.0.29",
        "pkg:npm/json5@1.0.1",
        "pkg:npm/minimist@1.2.6",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-import@2.26.0",
      "dependsOn": [
        "pkg:npm/array-includes@3.1.5",
        "pkg:npm/array.prototype.flat@1.3.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/doctrine@2.1.0",
        "pkg:npm/eslint-import-resolver-node@0.3.6",
        "pkg:npm/eslint-module-utils@2.7.3",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/has@1.0.3",
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/object.values@1.1.5",
        "pkg:npm/resolve@1.22.0",
        "pkg:npm/tsconfig-paths@3.14.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/eslint-scope@3.7.3",
      "dependsOn": [
        "pkg:npm/@types/eslint@7.29.0",
        "pkg:npm/@types/estree@0.0.51"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/long@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-numbers@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1",
        "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ast@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/helper-numbers@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/ieee754@1.11.1",
      "dependsOn": [
        "pkg:npm/@xtuc/ieee754@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/leb128@1.11.1",
      "dependsOn": [
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/utf8@1.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/ieee754@1.11.1",
        "pkg:npm/@webassemblyjs/leb128@1.11.1",
        "pkg:npm/@webassemblyjs/utf8@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-api-error@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/ieee754@1.11.1",
        "pkg:npm/@webassemblyjs/leb128@1.11.1",
        "pkg:npm/@webassemblyjs/utf8@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-opt@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wast-printer@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@xtuc/long@4.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@webassemblyjs/wasm-edit@1.11.1",
      "dependsOn": [
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/helper-buffer@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1",
        "pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-gen@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-opt@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
        "pkg:npm/@webassemblyjs/wast-printer@1.11.1"
      ]
    },
    {
      "ref": "pkg:npm/acorn@8.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-import-assertions@1.8.0",
      "dependsOn": [
        "pkg:npm/acorn@8.7.1"
      ]
    },
    {
      "ref": "pkg:npm/chrome-trace-event@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tapable@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@5.9.3",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/tapable@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/es-module-lexer@0.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-to-regexp@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-runner@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/neo-async@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv-keywords@3.5.2",
      "dependsOn": [
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@3.1.1",
      "dependsOn": [
        "pkg:npm/@types/json-schema@7.0.11",
        "pkg:npm/ajv-keywords@3.5.2",
        "pkg:npm/ajv@6.12.6"
      ]
    },
    {
      "ref": "pkg:npm/jest-worker@27.5.1",
      "dependsOn": [
        "pkg:npm/@types/node@15.14.9",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/supports-color@8.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.1",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.13",
        "pkg:npm/@jridgewell/trace-mapping@0.3.13"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/source-map@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.2",
        "pkg:npm/@jridgewell/trace-mapping@0.3.13"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.21",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.2",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/terser@5.14.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/source-map@0.3.2",
        "pkg:npm/acorn@8.7.1",
        "pkg:npm/commander@2.20.3",
        "pkg:npm/source-map-support@0.5.21"
      ]
    },
    {
      "ref": "pkg:npm/terser-webpack-plugin@5.3.1",
      "dependsOn": [
        "pkg:npm/jest-worker@27.5.1",
        "pkg:npm/schema-utils@3.1.1",
        "pkg:npm/serialize-javascript@6.0.0",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/terser@5.14.2",
        "pkg:npm/webpack@5.72.1"
      ]
    },
    {
      "ref": "pkg:npm/watchpack@2.3.1",
      "dependsOn": [
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.10"
      ]
    },
    {
      "ref": "pkg:npm/webpack-sources@3.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack@5.72.1",
      "dependsOn": [
        "pkg:npm/@types/eslint-scope@3.7.3",
        "pkg:npm/@types/estree@0.0.51",
        "pkg:npm/@webassemblyjs/ast@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-edit@1.11.1",
        "pkg:npm/@webassemblyjs/wasm-parser@1.11.1",
        "pkg:npm/acorn-import-assertions@1.8.0",
        "pkg:npm/acorn@8.7.1",
        "pkg:npm/browserslist@4.20.3",
        "pkg:npm/chrome-trace-event@1.0.3",
        "pkg:npm/enhanced-resolve@5.9.3",
        "pkg:npm/es-module-lexer@0.9.3",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/events@3.3.0",
        "pkg:npm/glob-to-regexp@0.4.1",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/json-parse-even-better-errors@2.3.1",
        "pkg:npm/loader-runner@4.3.0",
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/neo-async@2.6.2",
        "pkg:npm/schema-utils@3.1.1",
        "pkg:npm/tapable@2.2.1",
        "pkg:npm/terser-webpack-plugin@5.3.1",
        "pkg:npm/watchpack@2.3.1",
        "pkg:npm/webpack-sources@3.2.3"
      ]
    },
    {
      "ref": "pkg:npm/array-find@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/memory-fs@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tapable@0.1.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@0.9.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/memory-fs@0.2.0",
        "pkg:npm/tapable@0.1.10"
      ]
    },
    {
      "ref": "pkg:npm/find-root@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/interpret@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-import-resolver-webpack@0.13.2",
      "dependsOn": [
        "pkg:npm/array-find@1.0.0",
        "pkg:npm/debug@3.2.7",
        "pkg:npm/enhanced-resolve@0.9.1",
        "pkg:npm/eslint-plugin-import@2.26.0",
        "pkg:npm/find-root@1.1.0",
        "pkg:npm/has@1.0.3",
        "pkg:npm/interpret@1.4.0",
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/is-regex@1.1.4",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/resolve@1.22.0",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/webpack@5.72.1"
      ]
    },
    {
      "ref": "pkg:npm/buf-compare@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-error@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-assert@0.2.1",
      "dependsOn": [
        "pkg:npm/buf-compare@1.0.1",
        "pkg:npm/is-error@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/deep-strict-equal@0.2.0",
      "dependsOn": [
        "pkg:npm/core-assert@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/enhance-visitors@1.0.0",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/espurify@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/import-modules@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/micro-spelling-correcter@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-plugin-ava@11.0.0",
      "dependsOn": [
        "pkg:npm/deep-strict-equal@0.2.0",
        "pkg:npm/enhance-visitors@1.0.0",
        "pkg:npm/eslint-utils@2.1.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/espree@7.3.1",
        "pkg:npm/espurify@2.1.1",
        "pkg:npm/import-modules@2.1.0",
        "pkg:npm/micro-spelling-correcter@1.1.1",
        "pkg:npm/pkg-dir@4.2.0",
        "pkg:npm/resolve-from@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-eslint-comments@3.2.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/ignore@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/get-set-props@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lowercase-keys@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-get-set-prop@1.0.0",
      "dependsOn": [
        "pkg:npm/get-set-props@0.1.0",
        "pkg:npm/lowercase-keys@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/js-types@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-js-type@2.0.0",
      "dependsOn": [
        "pkg:npm/js-types@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/obj-props@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-obj-prop@1.0.0",
      "dependsOn": [
        "pkg:npm/lowercase-keys@1.0.1",
        "pkg:npm/obj-props@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/proto-props@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-proto-prop@2.0.0",
      "dependsOn": [
        "pkg:npm/lowercase-keys@1.0.1",
        "pkg:npm/proto-props@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-no-use-extend-native@0.5.0",
      "dependsOn": [
        "pkg:npm/is-get-set-prop@1.0.0",
        "pkg:npm/is-js-type@2.0.0",
        "pkg:npm/is-obj-prop@1.0.0",
        "pkg:npm/is-proto-prop@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-es@3.0.1",
      "dependsOn": [
        "pkg:npm/eslint-utils@2.1.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/regexpp@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-node@11.1.0",
      "dependsOn": [
        "pkg:npm/eslint-plugin-es@3.0.1",
        "pkg:npm/eslint-utils@2.1.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/ignore@5.2.0",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/resolve@1.22.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/fast-diff@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier-linter-helpers@1.0.0",
      "dependsOn": [
        "pkg:npm/fast-diff@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-prettier@3.4.1",
      "dependsOn": [
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/prettier-linter-helpers@1.0.0",
        "pkg:npm/prettier@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-promise@4.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ci-info@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clean-regexp@1.0.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/lodash.zip@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-ast-utils@1.1.0",
      "dependsOn": [
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/lodash.zip@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/eslint-parser@7.18.2",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.2",
        "pkg:npm/eslint-scope@5.1.1",
        "pkg:npm/eslint-visitor-keys@2.1.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/multimap@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-template-visitor@2.3.2",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.2",
        "pkg:npm/@babel/eslint-parser@7.18.2",
        "pkg:npm/eslint-visitor-keys@2.1.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/esquery@1.4.0",
        "pkg:npm/multimap@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pluralize@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/normalize-package-data@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.8.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.3.0",
        "pkg:npm/spdx-license-ids@3.0.11",
        "pkg:npm/spdx-license-ids@3.0.12"
      ]
    },
    {
      "ref": "pkg:npm/spdx-correct@3.1.1",
      "dependsOn": [
        "pkg:npm/spdx-expression-parse@3.0.1",
        "pkg:npm/spdx-license-ids@3.0.11",
        "pkg:npm/spdx-license-ids@3.0.12"
      ]
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "dependsOn": [
        "pkg:npm/spdx-correct@3.1.1",
        "pkg:npm/spdx-expression-parse@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.5.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.8.9",
        "pkg:npm/resolve@1.22.0",
        "pkg:npm/resolve@1.22.1",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/type-fest@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-pkg@5.2.0",
      "dependsOn": [
        "pkg:npm/@types/normalize-package-data@2.4.1",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/parse-json@5.2.0",
        "pkg:npm/type-fest@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@7.0.1",
      "dependsOn": [
        "pkg:npm/find-up@4.1.0",
        "pkg:npm/read-pkg@5.2.0",
        "pkg:npm/type-fest@0.8.1"
      ]
    },
    {
      "ref": "pkg:npm/regexp-tree@0.1.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/reserved-words@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-regex@2.1.1",
      "dependsOn": [
        "pkg:npm/regexp-tree@0.1.24"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-unicorn@25.0.1",
      "dependsOn": [
        "pkg:npm/ci-info@2.0.0",
        "pkg:npm/clean-regexp@1.0.0",
        "pkg:npm/eslint-ast-utils@1.1.0",
        "pkg:npm/eslint-template-visitor@2.3.2",
        "pkg:npm/eslint-utils@2.1.0",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/import-modules@2.1.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/pluralize@8.0.0",
        "pkg:npm/read-pkg-up@7.0.1",
        "pkg:npm/regexp-tree@0.1.24",
        "pkg:npm/reserved-words@0.1.2",
        "pkg:npm/safe-regex@2.1.1",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/at-least-node@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@9.1.0",
      "dependsOn": [
        "pkg:npm/at-least-node@1.0.0",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/glob@7.2.0",
      "dependsOn": [
        "pkg:npm/@types/minimatch@3.0.5",
        "pkg:npm/@types/node@15.14.9"
      ]
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@1.0.2",
      "dependsOn": [
        "pkg:npm/array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/pify@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-type@3.0.0",
      "dependsOn": [
        "pkg:npm/pify@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dir-glob@2.2.2",
      "dependsOn": [
        "pkg:npm/path-type@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/call-me-maybe@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-to-regexp@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@mrmlnc/readdir-enhanced@2.2.1",
      "dependsOn": [
        "pkg:npm/call-me-maybe@1.0.1",
        "pkg:npm/glob-to-regexp@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.stat@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@3.1.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/path-dirname@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@3.1.0",
      "dependsOn": [
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/path-dirname@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/arr-diff@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-unique@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-flatten@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend-shallow@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/is-number@3.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@2.1.1",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@4.0.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/repeat-string@1.6.1",
        "pkg:npm/to-regex-range@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-visit@1.0.1",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/map-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/collection-visit@1.0.0",
      "dependsOn": [
        "pkg:npm/map-visit@1.0.0",
        "pkg:npm/object-visit@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/component-emitter@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-value@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@4.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/has-values@1.0.0",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@1.0.0",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@1.0.0",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-plain-object@2.0.4",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assign-symbols@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extendable@1.0.1",
      "dependsOn": [
        "pkg:npm/is-plain-object@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/extend-shallow@3.0.2",
      "dependsOn": [
        "pkg:npm/assign-symbols@1.0.0",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/split-string@3.1.0",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/set-value@2.0.1",
      "dependsOn": [
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/is-plain-object@2.0.4",
        "pkg:npm/split-string@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-object-path@0.3.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/arr-union@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/union-value@1.0.1",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/is-extendable@0.1.1",
        "pkg:npm/set-value@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/has-values@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": [
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-value@0.3.1",
      "dependsOn": [
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-values@0.1.4",
        "pkg:npm/isobject@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unset-value@1.0.0",
      "dependsOn": [
        "pkg:npm/has-value@0.3.1",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cache-base@1.0.1",
      "dependsOn": [
        "pkg:npm/collection-visit@1.0.0",
        "pkg:npm/component-emitter@1.3.0",
        "pkg:npm/get-value@2.0.6",
        "pkg:npm/has-value@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/set-value@2.0.1",
        "pkg:npm/to-object-path@0.3.0",
        "pkg:npm/union-value@1.0.1",
        "pkg:npm/unset-value@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-descriptor@0.1.6",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@0.1.6",
        "pkg:npm/is-data-descriptor@0.1.4",
        "pkg:npm/kind-of@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/define-property@0.2.5",
      "dependsOn": [
        "pkg:npm/is-descriptor@0.1.6"
      ]
    },
    {
      "ref": "pkg:npm/copy-descriptor@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-copy@0.1.0",
      "dependsOn": [
        "pkg:npm/copy-descriptor@0.1.1",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/static-extend@0.1.2",
      "dependsOn": [
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/object-copy@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/class-utils@0.3.6",
      "dependsOn": [
        "pkg:npm/arr-union@3.1.0",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/static-extend@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@6.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-accessor-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-data-descriptor@1.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-descriptor@1.0.2",
      "dependsOn": [
        "pkg:npm/is-accessor-descriptor@1.0.0",
        "pkg:npm/is-data-descriptor@1.0.0",
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/define-property@1.0.0",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/for-in@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mixin-deep@1.3.2",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2",
        "pkg:npm/is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pascalcase@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base@0.11.2",
      "dependsOn": [
        "pkg:npm/cache-base@1.0.1",
        "pkg:npm/class-utils@0.3.6",
        "pkg:npm/component-emitter@1.3.0",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/mixin-deep@1.3.2",
        "pkg:npm/pascalcase@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/map-cache@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/atob@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decode-uri-component@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-url@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-url@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urix@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-resolve@0.5.3",
      "dependsOn": [
        "pkg:npm/atob@2.1.2",
        "pkg:npm/decode-uri-component@0.2.0",
        "pkg:npm/resolve-url@0.2.1",
        "pkg:npm/source-map-url@0.4.1",
        "pkg:npm/urix@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/use@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/snapdragon@0.8.2",
      "dependsOn": [
        "pkg:npm/base@0.11.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/map-cache@0.2.2",
        "pkg:npm/source-map-resolve@0.5.3",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/use@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-util@3.0.1",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/snapdragon-node@2.1.1",
      "dependsOn": [
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/snapdragon-util@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/define-property@2.0.2",
      "dependsOn": [
        "pkg:npm/is-descriptor@1.0.2",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ret@0.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-regex@1.1.0",
      "dependsOn": [
        "pkg:npm/ret@0.1.15"
      ]
    },
    {
      "ref": "pkg:npm/regex-not@1.0.2",
      "dependsOn": [
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/to-regex@3.0.2",
      "dependsOn": [
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/braces@2.3.2",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fill-range@4.0.0",
        "pkg:npm/isobject@3.0.1",
        "pkg:npm/repeat-element@1.1.4",
        "pkg:npm/snapdragon-node@2.1.1",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/split-string@3.1.0",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/posix-character-classes@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@2.1.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/define-property@0.2.5",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/posix-character-classes@0.1.1",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fragment-cache@0.2.1",
      "dependsOn": [
        "pkg:npm/map-cache@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/extglob@2.0.4",
      "dependsOn": [
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@1.0.0",
        "pkg:npm/expand-brackets@2.1.4",
        "pkg:npm/extend-shallow@2.0.1",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object.pick@1.3.0",
      "dependsOn": [
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nanomatch@1.2.13",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/is-windows@1.0.2",
        "pkg:npm/kind-of@6.0.3",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@3.1.10",
      "dependsOn": [
        "pkg:npm/arr-diff@4.0.0",
        "pkg:npm/array-unique@0.3.2",
        "pkg:npm/braces@2.3.2",
        "pkg:npm/define-property@2.0.2",
        "pkg:npm/extend-shallow@3.0.2",
        "pkg:npm/extglob@2.0.4",
        "pkg:npm/fragment-cache@0.2.1",
        "pkg:npm/kind-of@6.0.3",
        "pkg:npm/nanomatch@1.2.13",
        "pkg:npm/object.pick@1.3.0",
        "pkg:npm/regex-not@1.0.2",
        "pkg:npm/snapdragon@0.8.2",
        "pkg:npm/to-regex@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-glob@2.2.7",
      "dependsOn": [
        "pkg:npm/@mrmlnc/readdir-enhanced@2.2.1",
        "pkg:npm/@nodelib/fs.stat@1.1.3",
        "pkg:npm/glob-parent@3.1.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/micromatch@3.1.10"
      ]
    },
    {
      "ref": "pkg:npm/slash@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globby@9.2.0",
      "dependsOn": [
        "pkg:npm/@types/glob@7.2.0",
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/dir-glob@2.2.2",
        "pkg:npm/fast-glob@2.2.7",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/ignore@4.0.6",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/slash@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-path-inside@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimist@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-obj@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/quick-lru@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@6.2.2",
      "dependsOn": [
        "pkg:npm/camelcase@5.3.1",
        "pkg:npm/map-obj@4.3.0",
        "pkg:npm/quick-lru@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/map-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize-keys@1.1.0",
      "dependsOn": [
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/hard-rejection@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arrify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-plain-obj@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist-options@4.1.0",
      "dependsOn": [
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/is-plain-obj@1.1.0",
        "pkg:npm/kind-of@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@3.0.3",
      "dependsOn": [
        "pkg:npm/hosted-git-info@4.1.0",
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/min-indent@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-indent@3.0.0",
      "dependsOn": [
        "pkg:npm/min-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/redent@3.0.0",
      "dependsOn": [
        "pkg:npm/indent-string@4.0.0",
        "pkg:npm/strip-indent@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/trim-newlines@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/meow@8.1.2",
      "dependsOn": [
        "pkg:npm/@types/minimist@1.2.2",
        "pkg:npm/camelcase-keys@6.2.2",
        "pkg:npm/decamelize-keys@1.1.0",
        "pkg:npm/hard-rejection@2.1.0",
        "pkg:npm/minimist-options@4.1.0",
        "pkg:npm/normalize-package-data@3.0.3",
        "pkg:npm/read-pkg-up@7.0.1",
        "pkg:npm/redent@3.0.0",
        "pkg:npm/trim-newlines@3.0.1",
        "pkg:npm/type-fest@0.18.1",
        "pkg:npm/yargs-parser@20.2.4"
      ]
    },
    {
      "ref": "pkg:npm/env-editor@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/line-column-path@2.0.0",
      "dependsOn": [
        "pkg:npm/type-fest@0.4.1"
      ]
    },
    {
      "ref": "pkg:npm/is-docker@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-wsl@2.2.0",
      "dependsOn": [
        "pkg:npm/is-docker@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/open@7.4.2",
      "dependsOn": [
        "pkg:npm/is-docker@2.2.1",
        "pkg:npm/is-wsl@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/open-editor@3.0.0",
      "dependsOn": [
        "pkg:npm/env-editor@0.4.2",
        "pkg:npm/execa@5.1.1",
        "pkg:npm/line-column-path@2.0.0",
        "pkg:npm/open@7.4.2"
      ]
    },
    {
      "ref": "pkg:npm/p-reduce@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-cwd@3.0.0",
      "dependsOn": [
        "pkg:npm/resolve-from@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/unc-path-regex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unc-path@1.0.0",
      "dependsOn": [
        "pkg:npm/unc-path-regex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-relative@1.0.0",
      "dependsOn": [
        "pkg:npm/is-unc-path@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute@1.0.0",
      "dependsOn": [
        "pkg:npm/is-relative@1.0.0",
        "pkg:npm/is-windows@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-negated-glob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-absolute-glob@2.0.2",
      "dependsOn": [
        "pkg:npm/is-absolute@1.0.0",
        "pkg:npm/is-negated-glob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-align@3.0.1",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/cli-boxes@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/widest-line@3.1.0",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/boxen@5.1.2",
      "dependsOn": [
        "pkg:npm/ansi-align@3.0.1",
        "pkg:npm/camelcase@6.3.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-boxes@2.2.1",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/type-fest@0.20.2",
        "pkg:npm/widest-line@3.1.0",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-obj@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-prop@5.3.0",
      "dependsOn": [
        "pkg:npm/is-obj@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/crypto-random-string@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-string@2.0.0",
      "dependsOn": [
        "pkg:npm/crypto-random-string@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/xdg-basedir@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/configstore@5.0.1",
      "dependsOn": [
        "pkg:npm/dot-prop@5.3.0",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/make-dir@3.1.0",
        "pkg:npm/unique-string@2.0.0",
        "pkg:npm/write-file-atomic@3.0.3",
        "pkg:npm/xdg-basedir@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/has-yarn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/import-lazy@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-ci@2.0.0",
      "dependsOn": [
        "pkg:npm/ci-info@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ini@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global-dirs@3.0.0",
      "dependsOn": [
        "pkg:npm/ini@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-installed-globally@0.4.0",
      "dependsOn": [
        "pkg:npm/global-dirs@3.0.0",
        "pkg:npm/is-path-inside@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-npm@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-yarn-global@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@sindresorhus/is@0.14.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defer-to-connect@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@szmarczak/http-timer@1.1.2",
      "dependsOn": [
        "pkg:npm/defer-to-connect@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/mimic-response@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-response@1.0.2",
      "dependsOn": [
        "pkg:npm/mimic-response@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@3.0.0",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@5.2.0",
      "dependsOn": [
        "pkg:npm/pump@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/json-buffer@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/keyv@3.1.0",
      "dependsOn": [
        "pkg:npm/json-buffer@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lowercase-keys@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-url@4.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/responselike@1.0.2",
      "dependsOn": [
        "pkg:npm/lowercase-keys@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cacheable-request@6.1.0",
      "dependsOn": [
        "pkg:npm/clone-response@1.0.2",
        "pkg:npm/get-stream@5.2.0",
        "pkg:npm/http-cache-semantics@4.1.0",
        "pkg:npm/keyv@3.1.0",
        "pkg:npm/lowercase-keys@2.0.0",
        "pkg:npm/normalize-url@4.5.1",
        "pkg:npm/responselike@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/decompress-response@3.3.0",
      "dependsOn": [
        "pkg:npm/mimic-response@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/duplexer3@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stream@4.1.0",
      "dependsOn": [
        "pkg:npm/pump@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-cancelable@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-readable-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prepend-http@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse-lax@3.0.0",
      "dependsOn": [
        "pkg:npm/prepend-http@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/got@9.6.0",
      "dependsOn": [
        "pkg:npm/@sindresorhus/is@0.14.0",
        "pkg:npm/@szmarczak/http-timer@1.1.2",
        "pkg:npm/cacheable-request@6.1.0",
        "pkg:npm/decompress-response@3.3.0",
        "pkg:npm/duplexer3@0.1.4",
        "pkg:npm/get-stream@4.1.0",
        "pkg:npm/lowercase-keys@1.0.1",
        "pkg:npm/mimic-response@1.0.1",
        "pkg:npm/p-cancelable@1.1.0",
        "pkg:npm/to-readable-stream@1.0.0",
        "pkg:npm/url-parse-lax@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ini@1.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.8",
      "dependsOn": [
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ini@1.3.8",
        "pkg:npm/minimist@1.2.6",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-auth-token@4.2.1",
      "dependsOn": [
        "pkg:npm/rc@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@5.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/package-json@6.5.0",
      "dependsOn": [
        "pkg:npm/got@9.6.0",
        "pkg:npm/registry-auth-token@4.2.1",
        "pkg:npm/registry-url@5.1.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@5.1.0",
      "dependsOn": [
        "pkg:npm/package-json@6.5.0"
      ]
    },
    {
      "ref": "pkg:npm/escape-goat@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pupa@2.1.1",
      "dependsOn": [
        "pkg:npm/escape-goat@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/semver-diff@3.1.1",
      "dependsOn": [
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/update-notifier@5.1.0",
      "dependsOn": [
        "pkg:npm/boxen@5.1.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/configstore@5.0.1",
        "pkg:npm/has-yarn@2.1.0",
        "pkg:npm/import-lazy@2.1.0",
        "pkg:npm/is-ci@2.0.0",
        "pkg:npm/is-installed-globally@0.4.0",
        "pkg:npm/is-npm@5.0.0",
        "pkg:npm/is-yarn-global@0.3.0",
        "pkg:npm/latest-version@5.1.0",
        "pkg:npm/pupa@2.1.1",
        "pkg:npm/semver-diff@3.1.1",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/xdg-basedir@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/xo@0.37.1",
      "dependsOn": [
        "pkg:npm/@typescript-eslint/eslint-plugin@4.33.0",
        "pkg:npm/@typescript-eslint/parser@4.33.0",
        "pkg:npm/arrify@2.0.1",
        "pkg:npm/cosmiconfig@7.0.1",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/eslint-config-prettier@7.2.0",
        "pkg:npm/eslint-config-xo-typescript@0.37.0",
        "pkg:npm/eslint-config-xo@0.34.0",
        "pkg:npm/eslint-formatter-pretty@4.1.0",
        "pkg:npm/eslint-import-resolver-webpack@0.13.2",
        "pkg:npm/eslint-plugin-ava@11.0.0",
        "pkg:npm/eslint-plugin-eslint-comments@3.2.0",
        "pkg:npm/eslint-plugin-import@2.26.0",
        "pkg:npm/eslint-plugin-no-use-extend-native@0.5.0",
        "pkg:npm/eslint-plugin-node@11.1.0",
        "pkg:npm/eslint-plugin-prettier@3.4.1",
        "pkg:npm/eslint-plugin-promise@4.3.1",
        "pkg:npm/eslint-plugin-unicorn@25.0.1",
        "pkg:npm/eslint@7.32.0",
        "pkg:npm/find-cache-dir@3.3.2",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/get-stdin@8.0.0",
        "pkg:npm/globby@9.2.0",
        "pkg:npm/has-flag@4.0.0",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/is-path-inside@3.0.3",
        "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
        "pkg:npm/json5@2.2.1",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/meow@8.1.2",
        "pkg:npm/micromatch@4.0.5",
        "pkg:npm/open-editor@3.0.0",
        "pkg:npm/p-reduce@2.1.0",
        "pkg:npm/path-exists@4.0.0",
        "pkg:npm/prettier@2.6.2",
        "pkg:npm/resolve-cwd@3.0.0",
        "pkg:npm/resolve-from@5.0.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/to-absolute-glob@2.0.2",
        "pkg:npm/typescript@4.7.2",
        "pkg:npm/update-notifier@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-assert@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yeoman-environment@3.9.1",
      "dependsOn": [
        "pkg:npm/@npmcli/arborist@4.3.1",
        "pkg:npm/are-we-there-yet@2.0.0",
        "pkg:npm/arrify@2.0.1",
        "pkg:npm/binaryextensions@4.18.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-table@0.3.11",
        "pkg:npm/commander@7.1.0",
        "pkg:npm/dateformat@4.6.3",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/diff@5.1.0",
        "pkg:npm/error@10.4.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/execa@5.1.1",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/grouped-queue@2.0.0",
        "pkg:npm/inquirer@8.2.4",
        "pkg:npm/is-scoped@2.1.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/mem-fs-editor@9.4.0",
        "pkg:npm/mem-fs@2.2.1",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/npmlog@5.0.1",
        "pkg:npm/p-queue@6.6.2",
        "pkg:npm/p-transform@1.3.0",
        "pkg:npm/pacote@12.0.3",
        "pkg:npm/preferred-pm@3.0.3",
        "pkg:npm/pretty-bytes@5.6.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/textextensions@5.15.0",
        "pkg:npm/untildify@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dargs@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/human-signals@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@4.1.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/get-stream@5.2.0",
        "pkg:npm/human-signals@1.1.1",
        "pkg:npm/is-stream@2.0.1",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/npm-run-path@4.0.1",
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/strip-final-newline@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/openapi-types@11.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@octokit/types@6.34.0",
      "dependsOn": [
        "pkg:npm/@octokit/openapi-types@11.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/auth-token@2.5.0",
      "dependsOn": [
        "pkg:npm/@octokit/types@6.34.0"
      ]
    },
    {
      "ref": "pkg:npm/is-plain-object@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universal-user-agent@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@octokit/endpoint@6.0.12",
      "dependsOn": [
        "pkg:npm/@octokit/types@6.34.0",
        "pkg:npm/is-plain-object@5.0.0",
        "pkg:npm/universal-user-agent@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/deprecation@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@octokit/request-error@2.1.0",
      "dependsOn": [
        "pkg:npm/@octokit/types@6.34.0",
        "pkg:npm/deprecation@2.3.1",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/tr46@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@5.0.0",
      "dependsOn": [
        "pkg:npm/tr46@0.0.3",
        "pkg:npm/webidl-conversions@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/node-fetch@2.6.7",
      "dependsOn": [
        "pkg:npm/encoding@0.1.13",
        "pkg:npm/whatwg-url@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/request@5.6.3",
      "dependsOn": [
        "pkg:npm/@octokit/endpoint@6.0.12",
        "pkg:npm/@octokit/request-error@2.1.0",
        "pkg:npm/@octokit/types@6.34.0",
        "pkg:npm/is-plain-object@5.0.0",
        "pkg:npm/node-fetch@2.6.7",
        "pkg:npm/universal-user-agent@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/graphql@4.8.0",
      "dependsOn": [
        "pkg:npm/@octokit/request@5.6.3",
        "pkg:npm/@octokit/types@6.34.0",
        "pkg:npm/universal-user-agent@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/before-after-hook@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@octokit/core@3.6.0",
      "dependsOn": [
        "pkg:npm/@octokit/auth-token@2.5.0",
        "pkg:npm/@octokit/graphql@4.8.0",
        "pkg:npm/@octokit/request-error@2.1.0",
        "pkg:npm/@octokit/request@5.6.3",
        "pkg:npm/@octokit/types@6.34.0",
        "pkg:npm/before-after-hook@2.2.2",
        "pkg:npm/universal-user-agent@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/plugin-paginate-rest@2.17.0",
      "dependsOn": [
        "pkg:npm/@octokit/core@3.6.0",
        "pkg:npm/@octokit/types@6.34.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/plugin-request-log@1.0.4",
      "dependsOn": [
        "pkg:npm/@octokit/core@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/plugin-rest-endpoint-methods@5.13.0",
      "dependsOn": [
        "pkg:npm/@octokit/core@3.6.0",
        "pkg:npm/@octokit/types@6.34.0",
        "pkg:npm/deprecation@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/@octokit/rest@18.12.0",
      "dependsOn": [
        "pkg:npm/@octokit/core@3.6.0",
        "pkg:npm/@octokit/plugin-paginate-rest@2.17.0",
        "pkg:npm/@octokit/plugin-request-log@1.0.4",
        "pkg:npm/@octokit/plugin-rest-endpoint-methods@5.13.0"
      ]
    },
    {
      "ref": "pkg:npm/github-username@6.0.0",
      "dependsOn": [
        "pkg:npm/@octokit/rest@18.12.0"
      ]
    },
    {
      "ref": "pkg:npm/rechoir@0.6.2",
      "dependsOn": [
        "pkg:npm/resolve@1.22.0"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.8.5",
      "dependsOn": [
        "pkg:npm/glob@7.2.3",
        "pkg:npm/interpret@1.4.0",
        "pkg:npm/rechoir@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/sort-keys@4.2.0",
      "dependsOn": [
        "pkg:npm/is-plain-obj@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-generator@5.6.1",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/dargs@7.0.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/execa@4.1.0",
        "pkg:npm/github-username@6.0.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/minimist@1.2.6",
        "pkg:npm/read-pkg-up@7.0.1",
        "pkg:npm/run-async@2.4.1",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/shelljs@0.8.5",
        "pkg:npm/sort-keys@4.2.0",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/yeoman-environment@3.9.1"
      ]
    },
    {
      "ref": "pkg:npm/@sinonjs/fake-timers@6.0.1",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@sinonjs/samsam@5.3.1",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nise@4.1.0",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3",
        "pkg:npm/@sinonjs/fake-timers@6.0.1",
        "pkg:npm/@sinonjs/text-encoding@0.7.1",
        "pkg:npm/just-extend@4.2.1",
        "pkg:npm/path-to-regexp@1.8.0"
      ]
    },
    {
      "ref": "pkg:npm/sinon@10.0.0",
      "dependsOn": [
        "pkg:npm/@sinonjs/commons@1.8.3",
        "pkg:npm/@sinonjs/fake-timers@6.0.1",
        "pkg:npm/@sinonjs/samsam@5.3.1",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/nise@4.1.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/temp-dir@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yeoman-test@6.3.0",
      "dependsOn": [
        "pkg:npm/inquirer@8.2.4",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/mem-fs-editor@9.4.0",
        "pkg:npm/mem-fs@2.2.1",
        "pkg:npm/sinon@10.0.0",
        "pkg:npm/temp-dir@2.0.0",
        "pkg:npm/yeoman-environment@3.9.1",
        "pkg:npm/yeoman-generator@5.6.1"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-environment@3.19.3-tuxcare.1",
      "dependsOn": [
        "pkg:npm/@npmcli/arborist@4.3.1",
        "pkg:npm/are-we-there-yet@2.0.0",
        "pkg:npm/arrify@2.0.1",
        "pkg:npm/binaryextensions@4.18.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-table@0.3.11",
        "pkg:npm/commander@7.1.0",
        "pkg:npm/coveralls@3.1.1",
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/dateformat@4.6.3",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/diff@5.1.0",
        "pkg:npm/error@10.4.0",
        "pkg:npm/escape-string-regexp@4.0.0",
        "pkg:npm/execa@5.1.1",
        "pkg:npm/find-up@5.0.0",
        "pkg:npm/fs-extra@10.1.0",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/grouped-queue@2.0.0",
        "pkg:npm/inquirer@8.2.4",
        "pkg:npm/is-scoped@2.1.0",
        "pkg:npm/isbinaryfile@4.0.10",
        "pkg:npm/jsdoc@3.6.10",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/mem-fs-editor@9.4.0",
        "pkg:npm/mem-fs@2.2.1",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/mocha@9.2.2",
        "pkg:npm/npmlog@5.0.1",
        "pkg:npm/nyc@15.1.0",
        "pkg:npm/p-queue@6.6.2",
        "pkg:npm/p-transform@1.3.0",
        "pkg:npm/pacote@12.0.3",
        "pkg:npm/preferred-pm@3.0.3",
        "pkg:npm/prettier@2.6.2",
        "pkg:npm/pretty-bytes@5.6.0",
        "pkg:npm/proxyquire@2.1.3",
        "pkg:npm/readable-stream@4.3.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/sinon-test@3.1.3",
        "pkg:npm/sinon@11.1.2",
        "pkg:npm/slash@3.0.0",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/textextensions@5.15.0",
        "pkg:npm/tui-jsdoc-template@1.2.2",
        "pkg:npm/untildify@4.0.0",
        "pkg:npm/xo@0.37.1",
        "pkg:npm/yeoman-assert@3.1.1",
        "pkg:npm/yeoman-generator@5.6.1",
        "pkg:npm/yeoman-test@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/npm",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@2.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.1.3",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/CSSwhat@0.4.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domutils@1.4.3",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/CSSselect@0.4.1",
      "dependsOn": [
        "pkg:npm/CSSwhat@0.4.7",
        "pkg:npm/domutils@1.4.3"
      ]
    },
    {
      "ref": "pkg:npm/dom-serializer@0.0.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.3.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/entities@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.14",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.3",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.8.3",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/domhandler@2.3.0",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.0.0",
        "pkg:npm/readable-stream@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash@2.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cheerio@0.18.0",
      "dependsOn": [
        "pkg:npm/CSSselect@0.4.1",
        "pkg:npm/dom-serializer@0.0.1",
        "pkg:npm/entities@1.1.2",
        "pkg:npm/htmlparser2@3.8.3",
        "pkg:npm/lodash@2.4.2"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/class-extend@0.1.2",
      "dependsOn": [
        "pkg:npm/object-assign@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-spawn@0.2.9",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3"
      ]
    },
    {
      "ref": "pkg:npm/dargs@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@2.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array-find-index@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/currently-unhandled@0.4.1",
      "dependsOn": [
        "pkg:npm/array-find-index@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/loud-rejection@1.6.0",
      "dependsOn": [
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-core-module@2.11.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.22.1",
      "dependsOn": [
        "pkg:npm/is-core-module@2.11.0",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-finite@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeating@2.0.1",
      "dependsOn": [
        "pkg:npm/is-finite@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@2.1.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-indent@1.0.1",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/redent@1.0.0",
      "dependsOn": [
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/trim-newlines@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/meow@3.7.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/normalize-package-data@2.5.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dateformat@1.0.12",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/detect-conflict@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.2",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/is-tar@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@0.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@0.3.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@0.5.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@1.1.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@0.1.0",
        "pkg:npm/strip-ansi@0.3.0",
        "pkg:npm/supports-color@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-relative@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-absolute@0.1.7",
      "dependsOn": [
        "pkg:npm/is-relative@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/is-integer@1.0.7",
      "dependsOn": [
        "pkg:npm/is-finite@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-dirs@0.1.1",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/get-stdin@3.0.2",
        "pkg:npm/is-absolute@0.1.7",
        "pkg:npm/is-integer@1.0.7",
        "pkg:npm/minimist@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.34",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.3",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/bl@0.9.5",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34"
      ]
    },
    {
      "ref": "pkg:npm/xtend@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-stream@0.4.7",
      "dependsOn": [
        "pkg:npm/bl@0.9.5",
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/readable-stream@1.1.14",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/through2@0.6.5",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.34",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/clone@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.4.6",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/decompress-tar@2.0.2",
      "dependsOn": [
        "pkg:npm/is-tar@1.0.0",
        "pkg:npm/strip-dirs@0.1.1",
        "pkg:npm/tar-stream@0.4.7",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/is-bzip2@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/seek-bzip@1.0.6",
      "dependsOn": [
        "pkg:npm/commander@2.20.3"
      ]
    },
    {
      "ref": "pkg:npm/decompress-tarbz2@2.0.2",
      "dependsOn": [
        "pkg:npm/is-bzip2@1.0.0",
        "pkg:npm/seek-bzip@1.0.6",
        "pkg:npm/strip-dirs@0.1.1",
        "pkg:npm/tar-stream@0.4.7",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/is-gzip@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-natural-number@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sum-up@1.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/strip-dirs@1.1.1",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/is-absolute@0.1.7",
        "pkg:npm/is-natural-number@2.1.1",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/sum-up@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bl@1.2.3",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-fill@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-alloc@1.2.0",
      "dependsOn": [
        "pkg:npm/buffer-alloc-unsafe@1.1.0",
        "pkg:npm/buffer-fill@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-constants@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-buffer@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/bl@1.2.3",
        "pkg:npm/buffer-alloc@1.2.0",
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/fs-constants@1.0.0",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/to-buffer@1.1.1",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/decompress-targz@2.1.0",
      "dependsOn": [
        "pkg:npm/is-gzip@1.0.0",
        "pkg:npm/strip-dirs@1.1.1",
        "pkg:npm/tar-stream@1.6.2",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/is-zip@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fd-slicer@1.1.0",
      "dependsOn": [
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yauzl@2.10.0",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.13",
        "pkg:npm/fd-slicer@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/decompress-unzip@2.1.2",
      "dependsOn": [
        "pkg:npm/is-zip@1.0.0",
        "pkg:npm/strip-dirs@1.1.1",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6",
        "pkg:npm/yauzl@2.10.0"
      ]
    },
    {
      "ref": "pkg:npm/longest@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lpad-align@1.1.2",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/progress@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/download-status@2.2.1",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/lpad-align@1.1.2",
        "pkg:npm/object-assign@2.1.1",
        "pkg:npm/progress@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/onetime@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-immediate-shim@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/each-async@1.1.1",
      "dependsOn": [
        "pkg:npm/onetime@1.1.0",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-rename@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@1.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/repeating@1.1.3",
      "dependsOn": [
        "pkg:npm/is-finite@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@1.2.2",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/repeating@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/meow@2.1.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@1.0.0",
        "pkg:npm/indent-string@1.2.2",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/object-assign@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@0.5.5",
      "dependsOn": [
        "pkg:npm/deep-extend@0.2.11",
        "pkg:npm/ini@1.3.8",
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/strip-json-comments@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/aws4@1.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/psl@1.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-combiner@0.2.2",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.2",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/ip-regex@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-regex@2.1.3",
      "dependsOn": [
        "pkg:npm/ip-regex@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/defaults@1.0.4",
      "dependsOn": [
        "pkg:npm/clone@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.10",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.5.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/find-index@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob2base@0.0.12",
      "dependsOn": [
        "pkg:npm/find-index@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ordered-read-streams@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-stream@3.1.18",
      "dependsOn": [
        "pkg:npm/glob2base@0.0.12",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/ordered-read-streams@0.1.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/unique-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/inherits@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.1.21",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/inherits@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globule@0.1.0",
      "dependsOn": [
        "pkg:npm/glob@3.1.21",
        "pkg:npm/lodash@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/gaze@0.5.2",
      "dependsOn": [
        "pkg:npm/globule@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-watcher@0.0.6",
      "dependsOn": [
        "pkg:npm/gaze@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.6",
      "dependsOn": [
        "pkg:npm/minimist@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@1.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@1.0.0",
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-fs@0.3.14",
      "dependsOn": [
        "pkg:npm/defaults@1.0.4",
        "pkg:npm/glob-stream@3.1.18",
        "pkg:npm/glob-watcher@0.0.6",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/co@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-fn@0.1.5",
      "dependsOn": [
        "pkg:npm/co@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/ware@1.3.0",
      "dependsOn": [
        "pkg:npm/wrap-fn@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/download@3.3.0",
      "dependsOn": [
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/decompress-tar@2.0.2",
        "pkg:npm/decompress-tarbz2@2.0.2",
        "pkg:npm/decompress-targz@2.1.0",
        "pkg:npm/decompress-unzip@2.1.2",
        "pkg:npm/download-status@2.2.1",
        "pkg:npm/each-async@1.1.1",
        "pkg:npm/get-stdin@3.0.2",
        "pkg:npm/gulp-rename@1.4.0",
        "pkg:npm/meow@2.1.0",
        "pkg:npm/rc@0.5.5",
        "pkg:npm/request@2.88.2",
        "pkg:npm/stream-combiner@0.2.2",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/url-regex@2.1.3",
        "pkg:npm/vinyl-fs@0.3.14",
        "pkg:npm/vinyl@0.4.6",
        "pkg:npm/ware@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.3.5",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@0.2.1",
      "dependsOn": [
        "pkg:npm/glob@4.3.5"
      ]
    },
    {
      "ref": "pkg:npm/isbinaryfile@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rimraf@2.7.1",
      "dependsOn": [
        "pkg:npm/glob@7.2.3"
      ]
    },
    {
      "ref": "pkg:npm/file-utils@0.2.2",
      "dependsOn": [
        "pkg:npm/findup-sync@0.2.1",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/isbinaryfile@2.0.4",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/rimraf@2.7.1"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-shift@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexify@3.7.1",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/stream-shift@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/infinity-agent@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nested-error-stacks@1.0.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/prepend-http@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-all-stream@2.2.0",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/statuses@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timed-out@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/got@2.9.2",
      "dependsOn": [
        "pkg:npm/duplexify@3.7.1",
        "pkg:npm/infinity-agent@2.0.3",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/lowercase-keys@1.0.1",
        "pkg:npm/nested-error-stacks@1.0.2",
        "pkg:npm/object-assign@2.1.1",
        "pkg:npm/prepend-http@1.0.4",
        "pkg:npm/read-all-stream@2.2.0",
        "pkg:npm/statuses@1.5.0",
        "pkg:npm/timed-out@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/github-username@1.1.1",
      "dependsOn": [
        "pkg:npm/get-stdin@1.0.0",
        "pkg:npm/got@2.9.2"
      ]
    },
    {
      "ref": "pkg:npm/esprima@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esutils@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/escodegen@1.3.3",
      "dependsOn": [
        "pkg:npm/esprima@1.1.1",
        "pkg:npm/estraverse@1.5.1",
        "pkg:npm/esutils@1.0.0",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/traverse@0.6.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-query@0.2.5",
      "dependsOn": [
        "pkg:npm/class-extend@0.1.2",
        "pkg:npm/escodegen@1.3.3",
        "pkg:npm/esprima@1.1.1",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/traverse@0.6.7"
      ]
    },
    {
      "ref": "pkg:npm/gruntfile-editor@0.2.0",
      "dependsOn": [
        "pkg:npm/ast-query@0.2.5",
        "pkg:npm/lodash@2.4.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cli-width@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/figures@1.7.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash@3.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@2.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/readline2@0.1.1",
      "dependsOn": [
        "pkg:npm/mute-stream@0.0.4",
        "pkg:npm/strip-ansi@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rx@2.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inquirer@0.8.5",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-width@1.1.1",
        "pkg:npm/figures@1.7.0",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/readline2@0.1.1",
        "pkg:npm/rx@2.5.3",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/binaryextensions@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/textextensions@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istextorbinary@1.0.2",
      "dependsOn": [
        "pkg:npm/binaryextensions@1.0.1",
        "pkg:npm/textextensions@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/glob@5.0.15",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/samsam@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/formatio@1.1.1",
      "dependsOn": [
        "pkg:npm/samsam@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lolex@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.2.0",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/is-arguments@1.1.1",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-generator-function@1.0.10",
      "dependsOn": [
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/available-typed-arrays@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-callable@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-each@0.3.3",
      "dependsOn": [
        "pkg:npm/is-callable@1.2.7"
      ]
    },
    {
      "ref": "pkg:npm/gopd@1.0.1",
      "dependsOn": [
        "pkg:npm/get-intrinsic@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typed-array@1.1.10",
      "dependsOn": [
        "pkg:npm/available-typed-arrays@1.0.5",
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/for-each@0.3.3",
        "pkg:npm/gopd@1.0.1",
        "pkg:npm/has-tostringtag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-typed-array@1.1.9",
      "dependsOn": [
        "pkg:npm/available-typed-arrays@1.0.5",
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/for-each@0.3.3",
        "pkg:npm/gopd@1.0.1",
        "pkg:npm/has-tostringtag@1.0.0",
        "pkg:npm/is-typed-array@1.1.10"
      ]
    },
    {
      "ref": "pkg:npm/util@0.12.5",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/is-arguments@1.1.1",
        "pkg:npm/is-generator-function@1.0.10",
        "pkg:npm/is-typed-array@1.1.10",
        "pkg:npm/which-typed-array@1.1.9"
      ]
    },
    {
      "ref": "pkg:npm/sinon@1.17.7",
      "dependsOn": [
        "pkg:npm/formatio@1.1.1",
        "pkg:npm/lolex@1.3.2",
        "pkg:npm/samsam@1.1.2",
        "pkg:npm/util@0.12.5"
      ]
    },
    {
      "ref": "pkg:npm/mem-fs-editor@1.2.3",
      "dependsOn": [
        "pkg:npm/glob@5.0.15",
        "pkg:npm/lodash@3.10.1",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/rimraf@2.7.1",
        "pkg:npm/sinon@1.17.7",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@3.0.6",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/pretty-bytes@1.0.4",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/read-chunk@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-async@0.1.0",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore.string@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xdg-basedir@1.0.1",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-assert@1.0.0",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/lodash@2.4.2"
      ]
    },
    {
      "ref": "pkg:npm/diff@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@6.0.4",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/globby@4.1.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/glob@6.0.4",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/grouped-queue@0.3.3",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/ansi-escapes@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/exit-hook@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/restore-cursor@1.0.1",
      "dependsOn": [
        "pkg:npm/exit-hook@1.1.1",
        "pkg:npm/onetime@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-cursor@1.0.2",
      "dependsOn": [
        "pkg:npm/restore-cursor@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cli-width@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-shim@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spawn-sync@1.0.15",
      "dependsOn": [
        "pkg:npm/concat-stream@1.6.2",
        "pkg:npm/os-shim@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.0.29",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/external-editor@1.1.1",
      "dependsOn": [
        "pkg:npm/extend@3.0.2",
        "pkg:npm/spawn-sync@1.0.15",
        "pkg:npm/tmp@0.0.29"
      ]
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rx@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inquirer@1.2.3",
      "dependsOn": [
        "pkg:npm/ansi-escapes@1.4.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-cursor@1.0.2",
        "pkg:npm/cli-width@2.2.1",
        "pkg:npm/external-editor@1.1.1",
        "pkg:npm/figures@1.7.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/mute-stream@0.0.6",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/run-async@2.4.1",
        "pkg:npm/rx@4.1.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/log-symbols@1.0.2",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/through2@3.0.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/mem-fs@1.2.0",
      "dependsOn": [
        "pkg:npm/through2@3.0.2",
        "pkg:npm/vinyl-file@3.0.0",
        "pkg:npm/vinyl@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/os-homedir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/untildify@2.1.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-environment@1.6.6",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/diff@2.2.3",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/globby@4.1.0",
        "pkg:npm/grouped-queue@0.3.3",
        "pkg:npm/inquirer@1.2.3",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/log-symbols@1.0.2",
        "pkg:npm/mem-fs@1.2.0",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/untildify@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-welcome@1.0.1",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/yeoman-generator@0.18.10",
      "dependsOn": [
        "pkg:npm/async@0.9.2",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cheerio@0.18.0",
        "pkg:npm/class-extend@0.1.2",
        "pkg:npm/cli-table@0.3.11",
        "pkg:npm/cross-spawn@0.2.9",
        "pkg:npm/dargs@3.0.1",
        "pkg:npm/dateformat@1.0.12",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/detect-conflict@1.0.1",
        "pkg:npm/diff@1.4.0",
        "pkg:npm/download@3.3.0",
        "pkg:npm/file-utils@0.2.2",
        "pkg:npm/findup-sync@0.2.1",
        "pkg:npm/github-username@1.1.1",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/gruntfile-editor@0.2.0",
        "pkg:npm/inquirer@0.8.5",
        "pkg:npm/istextorbinary@1.0.2",
        "pkg:npm/lodash@2.4.2",
        "pkg:npm/mem-fs-editor@1.2.3",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/nopt@3.0.6",
        "pkg:npm/pretty-bytes@1.0.4",
        "pkg:npm/read-chunk@1.0.1",
        "pkg:npm/rimraf@2.7.1",
        "pkg:npm/run-async@0.1.0",
        "pkg:npm/shelljs@0.3.0",
        "pkg:npm/sinon@1.17.7",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/through2@0.6.5",
        "pkg:npm/underscore.string@2.4.0",
        "pkg:npm/user-home@1.1.1",
        "pkg:npm/xdg-basedir@1.0.1",
        "pkg:npm/yeoman-assert@1.0.0",
        "pkg:npm/yeoman-environment@1.6.6",
        "pkg:npm/yeoman-welcome@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/generator-commonjs@1.0.0",
      "dependsOn": [
        "pkg:npm/yeoman-generator@0.18.10"
      ]
    },
    {
      "ref": "pkg:npm/generator-dummy@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compare-version@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/binaryheap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/buffercursor@0.0.12",
      "dependsOn": [
        "pkg:npm/verror@1.10.1"
      ]
    },
    {
      "ref": "pkg:npm/native-dns-packet@0.1.1",
      "dependsOn": [
        "pkg:npm/buffercursor@0.0.12",
        "pkg:npm/ipaddr.js@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/native-dns-cache@0.0.2",
      "dependsOn": [
        "pkg:npm/binaryheap@0.0.3",
        "pkg:npm/native-dns-packet@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/native-dns@0.6.1",
      "dependsOn": [
        "pkg:npm/ipaddr.js@2.0.1",
        "pkg:npm/native-dns-cache@0.0.2",
        "pkg:npm/native-dns-packet@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/root-hints@1.0.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-online@3.2.0",
      "dependsOn": [
        "pkg:npm/each-async@1.1.1",
        "pkg:npm/log-symbols@1.0.2",
        "pkg:npm/native-dns@0.6.1",
        "pkg:npm/onetime@1.1.0",
        "pkg:npm/root-hints@1.0.15"
      ]
    },
    {
      "ref": "pkg:npm/multiline@1.0.2",
      "dependsOn": [
        "pkg:npm/strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/capture-stack-trace@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/create-error-class@3.0.2",
      "dependsOn": [
        "pkg:npm/capture-stack-trace@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/duplexer2@0.1.4",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/is-redirect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-retry-allowed@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-status-codes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-all-stream@3.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/readable-stream@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/unzip-response@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse-lax@1.0.0",
      "dependsOn": [
        "pkg:npm/prepend-http@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/got@5.6.0",
      "dependsOn": [
        "pkg:npm/create-error-class@3.0.2",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/is-plain-obj@1.1.0",
        "pkg:npm/is-redirect@1.0.0",
        "pkg:npm/is-retry-allowed@1.2.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/lowercase-keys@1.0.1",
        "pkg:npm/node-status-codes@1.0.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/read-all-stream@3.1.0",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/timed-out@2.0.0",
        "pkg:npm/unzip-response@1.0.2",
        "pkg:npm/url-parse-lax@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bower-name@1.1.0",
      "dependsOn": [
        "pkg:npm/got@5.6.0",
        "pkg:npm/log-symbols@1.0.2",
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@3.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/npm-name@1.2.0",
      "dependsOn": [
        "pkg:npm/got@5.6.0",
        "pkg:npm/log-symbols@1.0.2",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/registry-url@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-name@1.0.2",
      "dependsOn": [
        "pkg:npm/bower-name@1.1.0",
        "pkg:npm/each-async@1.1.1",
        "pkg:npm/log-symbols@1.0.2",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/npm-name@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/generator-jquery@1.2.3",
      "dependsOn": [
        "pkg:npm/compare-version@0.1.2",
        "pkg:npm/is-online@3.2.0",
        "pkg:npm/multiline@1.0.2",
        "pkg:npm/pkg-name@1.0.2",
        "pkg:npm/yeoman-generator@0.18.10"
      ]
    },
    {
      "ref": "pkg:npm/lookup-dummy-env",
      "dependsOn": [
        "pkg:npm/generator-commonjs@1.0.0",
        "pkg:npm/generator-dummy@0.1.0",
        "pkg:npm/generator-jquery@1.2.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/pnpm"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-10T19:41:46Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'pnpm'. The application also has 4 child modules/components. The package type in this SBOM is npm with 21 purl namespaces described under components. The components were identified from the source files: package-lock.json, test/fixtures/lookup-project/package-lock.json."
    }
  ]
}