{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:73e4c6d7-1f73-445e-b9da-8ffbe3449f19",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-24T03:14:31Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "plugin-aws-lambda",
      "group": "@bugsnag",
      "version": "7.25.0",
      "description": "AWS Lambda support for @bugsnag/node",
      "purl": "pkg:npm/%40bugsnag/plugin-aws-lambda@7.25.0",
      "bom-ref": "pkg:npm/@bugsnag/plugin-aws-lambda@7.25.0",
      "author": "Bugsnag",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "clean, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.bugsnag.com/"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@types\\n@vendia"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@types",
      "name": "aws-lambda",
      "version": "8.10.109",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcc13dd859de3725d0ceb01f727410956d579026463c39698b66a8d4c27079c37ee926dea2729e82053c7b26efd437ca962f74140553d4c9486555dfc15b82ca"
        }
      ],
      "purl": "pkg:npm/%40types/aws-lambda@8.10.109",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/aws-lambda/-/aws-lambda-8.10.109.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/aws-lambda@8.10.109",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/aws-lambda/-/aws-lambda-8.10.109.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/aws-lambda"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@vendia",
      "name": "serverless-express",
      "version": "4.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0533f1a743c6dba757f29c058b1b3348cb71f28687af8b1c21d808fca813e9c3bae46d667523b442d9785965a4d9a3fd494c395f7f87030e69206340b3515ee"
        }
      ],
      "purl": "pkg:npm/%40vendia/serverless-express@4.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@vendia/serverless-express/-/serverless-express-4.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@vendia/serverless-express@4.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@vendia/serverless-express/-/serverless-express-4.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7f3ec2fa8863dd7d0fe528cd54ba27a5620bf7054a097f3d5a53053dbc767e27b832bf07505c510120421ac5e19fd0621cade013372044c6d6a58ac0dbb8ca9"
        }
      ],
      "purl": "pkg:npm/express@4.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.18.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.18.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d802d8536b69b654ac6ebd20f70cf0bf1b2f94fac380d4b02e4fc9a4991bafc3e34009269e5c443e34771517bace365eaa71ac55dd4b9e9b06b093eefe4892f"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8452ca863cbb0cfa3ff37428598ec9d7e758385eb1c53885f07e70953c695093f9398226a470ab2ec4239b051bba0d29bda29c3f3bab2559b25d82140ce1b06"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c254042cc167a6bba51dc6c0c5157ffe815798a8a0287770f75159bdd631f0ca782e3b002f60f871f2736533ef8da9170ae82c71a5469f8e684874a88789baa"
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.20.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d68bb69b4db6306a33b2b56090737ed5ba599689169ee51c93a5a0b20dc4b9fe531db704b3e653a90c4ebbb2bc3f1d87b7e5fd73ddf0d0c3ededc60ee036d5b"
        }
      ],
      "purl": "pkg:npm/body-parser@1.20.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.20.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dac246253697208691d70e22252368374867318ec6a5cfe7f03e2a482270f10a855977fb72e0209c41f1069c1e69570f7af0b69772a98d80b1dcdca941081a26"
        }
      ],
      "purl": "pkg:npm/destroy@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc2b1bf7ae0736848d8791a8e825cbb1b4aaf8a25e82569ef107d99d6994175781bca3bf7e291d349bf73a1e1ccc83cb7dfe0d6cb95adf56a3e4d446d39849"
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "470340f59ffb3eb2b4eab60b23314c95a17e97bde2c29ceca9120581b30b6d370b0fa70e6a8f364da59e7cf5d0bc1d9f382e008ee612127752ecdfe64c26e475"
        }
      ],
      "purl": "pkg:npm/statuses@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32f8e830227011aad26d4624e4efa79a84b34aeb52b13c05f39cdc1cf43d3ab945a193982236aa040248a885e3a6dc83e6f4e1c46ab9d97bbf31a273464224e1"
        }
      ],
      "purl": "pkg:npm/qs@6.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab95cfcada85108287906762308ad8d749af2d1be7421e36ffe1a8065156ddbd8b5cb136c71269645766f78c1ed016a85774702721aa839c12edea714efd19bf"
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecef856c28a1ac1e5619b1587ac72dc264ca69eeab3a22339b3d6272b79627ed1a03b2c97eeaa112ca364fd9dca5c16dccc42dcd77f64061ae7962464d8b2aac"
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "409573d538fb312d3df4f7af506e63be7b7db5291737c2b5e1dc50962909b8fb78b83f611c01e32f22c188b479cc42de941743f50351017673b09c7459a0cbf4"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9772c2b85e8c8033704c32a47581848a1623b79a513db120e3aaed9669d23e551b82607c2ce22b2896d86050526e73da25ec4c2ad88f3bc8667918d1cf64ddf8"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfe70fc56d10194a7499ca9cb204322d5443a171506d73b005aab217b548808e1358d42c0c7ac1a5442c9519887c0a1859d633b3a525289b41d972694da352a5"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaa241b44c95812d1998f19d0853d627716b7a8aaf1b83154259ff902805ece96af7921b3a9d3f056c8cc1b76d9f8553be433c63b921090d97824fed72b0978a"
        }
      ],
      "purl": "pkg:npm/raw-body@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76afaa7a543d6a41e970e97f8145514f15483a4009d70477400bdbe11b158d2f285681630c64dcebbf702589949a49d41791f030b3a06f93be6b72b17d66a93d"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16f7994cdb86c34e1cc6502259bce2eb34c02ff9617a16966d3b6096e261e3f13de43a8cc139a16b7299375680580f1c148847ccc654bcb7af930e51aa4fad49"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619dc65329ffa3c81f289967957ee0ef1ab88323ba392ba118f29a686b2c181daa803512d203e0b53be8c992d3b7d01be9d0b885f73d755e5aae4bdcfce0a6af"
        }
      ],
      "purl": "pkg:npm/cookie@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4000f395a1dcf22715f08eef6da257270a1df47598a7cb82a9fd716b839f36ed53ec9571408ad480e5ad1dd343b4f8b2c2615b892d76563a2d2172eb28cde8ad"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cf257abc26a15a5589b609698fbe73f6232a3865233bfd029c4a6b8c2c339b7e91f97e2ed150699dfeb4c37feaeeb7fb1a88389011e5533600262447403b1d3"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6e5dc5157ed9503059d60bdaaefecbe45afdc64ddd8f7d484aff73cb9183407bb15ba8932ddf9d791dac44e9e44bef819db2b8a2c2e8e26b075a0750691084a"
        }
      ],
      "purl": "pkg:npm/finalhandler@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc9da6418335f2b1053ae75e57819285318843b45bcc0ee8cdb53d23f5c1a66ee4aa0332c209b294cc171f16499a45686249daf5dda95575573dd6133fd7a3f1"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7028ba837fd9af58aa422eb249bb1e3355efa286bdf0dd30df58f3518ad73d7db1a8e6e61461c9d2d439bbbe07de6561ef02e8b93b1e672608ab7f60f1c369d7"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89c9401de36a366ebccc5b676747bed4bdb250876fccda1ab8a53858103756f1ffbcf162785eea7d197051953e0c0f4ff5b3d7212f74ba5c68528087db7b15db"
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e43164ba8aa5bf5b9840ac72f2898505e24f41c768134ecabf6b1f7ab0c2ac0ab5a21394f8c483b300c86e7c7760033ad2a20e9d86b9df00615d6d046cca27ad"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaa5b3b8e8d214ebaa3e315ee0d3ac30b69f4e8410c0148e1294be17012ddc0d95def2ae6d3aae4f7be62d3429160317a7c02515616e3f5a8a68964eb4fa555e"
        }
      ],
      "purl": "pkg:npm/send@0.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/plugin-aws-lambda/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c6b910cd8d75228ec50bd2f97a9d20fb730511bb31208256ce685b9933d8379300d7396553724d232f38cfcc60fe4dacd66dba1962ee76ffdfd73dd5209def6"
        }
      ],
      "purl": "pkg:npm/serve-static@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4c653bc8913d5df93146bc33aaa1d39c971d105a49208ba4dda1af200bc7df18002acfda733d36560326dbb071e8103ff3b4cb64bff5686136324a1527f3584"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@types/aws-lambda@8.10.109",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@vendia/serverless-express@4.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.8",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/negotiator@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/depd@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.0",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.24",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.4.1",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.1.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/object-inspect@1.12.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/get-intrinsic@1.1.3",
        "pkg:npm/object-inspect@1.12.2"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.11.0",
      "dependsOn": [
        "pkg:npm/side-channel@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.5.1",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.18",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.20.1",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/qs@6.11.0",
        "pkg:npm/raw-body@2.5.1",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.4",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.2.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.7",
      "dependsOn": [
        "pkg:npm/forwarded@0.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.18.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.15.0",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@0.18.0"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.18.2",
      "dependsOn": [
        "pkg:npm/accepts@1.3.8",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/body-parser@1.20.1",
        "pkg:npm/content-disposition@0.5.4",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.5.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@1.2.0",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@2.0.7",
        "pkg:npm/qs@6.11.0",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/send@0.18.0",
        "pkg:npm/serve-static@1.15.0",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/utils-merge@1.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/@bugsnag/plugin-aws-lambda@7.25.0",
      "dependsOn": [
        "pkg:npm/@types/aws-lambda@8.10.109",
        "pkg:npm/@vendia/serverless-express@4.10.1",
        "pkg:npm/express@4.18.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@bugsnag/plugin-aws-lambda@7.25.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-24T03:14:31Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'plugin-aws-lambda' with version '7.25.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}