{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:0ff96eb3-4968-4587-aacf-5004c2a9ad20",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-27T17:58:00Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "core-js-builder",
      "group": "",
      "version": "3.9.0",
      "description": "core-js builder",
      "purl": "pkg:npm/core-js-builder@3.9.0",
      "bom-ref": "pkg:npm/core-js-builder@3.9.0",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zloirock/core-js.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@webassemblyjs\\n@xtuc"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/helper-module-context/package.json\\nnode_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-code-frame/package.json\\nnode_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-fsm/package.json\\nnode_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/package.json\\nnode_modules/@webassemblyjs/ast/node_modules/@xtuc/long/package.json\\nnode_modules/@webassemblyjs/ast/package.json\\nnode_modules/@webassemblyjs/helper-api-error/package.json\\nnode_modules/@webassemblyjs/helper-buffer/package.json\\nnode_modules/@webassemblyjs/helper-wasm-bytecode/package.json\\nnode_modules/@webassemblyjs/helper-wasm-section/package.json\\nnode_modules/@webassemblyjs/ieee754/node_modules/@xtuc/ieee754/package.json\\nnode_modules/@webassemblyjs/ieee754/package.json\\nnode_modules/@webassemblyjs/leb128/node_modules/@xtuc/long/package.json\\nnode_modules/@webassemblyjs/leb128/package.json\\nnode_modules/@webassemblyjs/utf8/package.json\\nnode_modules/@webassemblyjs/wasm-edit/package.json\\nnode_modules/@webassemblyjs/wasm-gen/package.json\\nnode_modules/@webassemblyjs/wasm-opt/package.json\\nnode_modules/@webassemblyjs/wasm-parser/package.json\\nnode_modules/@webassemblyjs/wast-printer/node_modules/@webassemblyjs/helper-code-frame/package.json\\nnode_modules/@webassemblyjs/wast-printer/node_modules/@webassemblyjs/helper-fsm/package.json\\nnode_modules/@webassemblyjs/wast-printer/node_modules/@webassemblyjs/wast-parser/package.json\\nnode_modules/@webassemblyjs/wast-printer/node_modules/@xtuc/long/package.json\\nnode_modules/@webassemblyjs/wast-printer/package.json\\nnode_modules/acorn/package.json\\nnode_modules/commander/package.json\\nnode_modules/core-js-compat/package.json\\nnode_modules/core-js/package.json\\nnode_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/node_modules/prr/package.json\\nnode_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/package.json\\nnode_modules/enhanced-resolve/node_modules/memory-fs/package.json\\nnode_modules/enhanced-resolve/package.json\\nnode_modules/eslint-scope/node_modules/esrecurse/node_modules/estraverse/package.json\\nnode_modules/eslint-scope/node_modules/esrecurse/package.json\\nnode_modules/eslint-scope/node_modules/estraverse/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/find-cache-dir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/isarray/package.json\\nnode_modules/loader-runner/package.json\\nnode_modules/locate-path/node_modules/path-exists/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-try/package.json\\nnode_modules/pkg-dir/package.json\\nnode_modules/punycode/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/schema-utils/node_modules/ajv-errors/package.json\\nnode_modules/schema-utils/package.json\\nnode_modules/serialize-javascript/package.json\\nnode_modules/source-map/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/tapable/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/bluebird/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/chownr/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/figgy-pudding/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/infer-owner/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/lru-cache/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/mississippi/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/move-concurrently/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/promise-inflight/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/ssri/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/unique-filename/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/node_modules/y18n/package.json\\nnode_modules/terser-webpack-plugin/node_modules/cacache/package.json\\nnode_modules/terser-webpack-plugin/node_modules/errno/node_modules/prr/package.json\\nnode_modules/terser-webpack-plugin/node_modules/errno/package.json\\nnode_modules/terser-webpack-plugin/node_modules/is-wsl/package.json\\nnode_modules/terser-webpack-plugin/node_modules/worker-farm/package.json\\nnode_modules/terser-webpack-plugin/package.json\\nnode_modules/terser/node_modules/source-map-support/package.json\\nnode_modules/terser/package.json\\nnode_modules/watchpack/node_modules/neo-async/package.json\\nnode_modules/watchpack/node_modules/watchpack-chokidar2/node_modules/chokidar/package.json\\nnode_modules/watchpack/node_modules/watchpack-chokidar2/package.json\\nnode_modules/watchpack/package.json\\nnode_modules/webpack-sources/node_modules/source-list-map/package.json\\nnode_modules/webpack-sources/package.json\\nnode_modules/webpack/node_modules/@webassemblyjs/helper-module-context/package.json\\nnode_modules/webpack/node_modules/chrome-trace-event/node_modules/tslib/package.json\\nnode_modules/webpack/node_modules/chrome-trace-event/package.json\\nnode_modules/webpack/node_modules/errno/node_modules/prr/package.json\\nnode_modules/webpack/node_modules/errno/package.json\\nnode_modules/webpack/node_modules/inherits/package.json\\nnode_modules/webpack/node_modules/json-parse-better-errors/package.json\\nnode_modules/webpack/node_modules/memory-fs/package.json\\nnode_modules/webpack/node_modules/neo-async/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/assert/node_modules/util/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/assert/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/browserify-zlib/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/console-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/constants-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/crypto-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/domain-browser/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/events/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/https-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/os-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/path-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/process/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/querystring-es3/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/stream-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/stream-http/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/timers-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/tty-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/url/node_modules/punycode/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/url/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/node_modules/vm-browserify/package.json\\nnode_modules/webpack/node_modules/node-libs-browser/package.json\\nnode_modules/webpack/node_modules/randombytes/package.json\\nnode_modules/webpack/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "webpack-sources",
      "version": "1.4.3",
      "description": "Source code handling classes for webpack",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack-sources@1.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/webpack-sources#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/webpack/webpack-sources.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack-sources/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack-sources/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack-sources/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "source-list-map",
      "version": "2.0.1",
      "description": "Fast line to line SourceMap generator.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-list-map@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/source-list-map"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/webpack/source-list-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack-sources/node_modules/source-list-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack-sources/node_modules/source-list-map/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack-sources/node_modules/source-list-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "webpack",
      "version": "4.46.0",
      "description": "Packs CommonJs/AMD modules for the browser. Allows to split your codebase into multiple bundles, which can be loaded on demand. Support loaders to preprocess files, i.e. json, jsx, es7, css, less, ... and your custom stuff.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webpack@4.46.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/webpack"
        },
        {
          "type": "vcs",
          "url": "https://github.com/webpack/webpack.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@4.46.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "webpack"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "description": "random bytes from browserify stand alone",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/randombytes"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/crypto-browserify/randombytes.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/randombytes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/randombytes/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/randombytes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "node-libs-browser",
      "version": "2.2.1",
      "description": "The node core libs for in browser usage.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-libs-browser@2.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/webpack/node-libs-browser"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/webpack/node-libs-browser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-libs-browser@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "vm-browserify",
      "version": "1.1.2",
      "description": "vm module for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/vm-browserify#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/substack/vm-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/vm-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/vm-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/vm-browserify/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.11.0",
      "description": "The core `url` packaged standalone for use with Browserify.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url@0.11.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-url#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/defunctzombie/node-url.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/url/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/url/node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/url/node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/url/node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "tty-browserify",
      "version": "0.0.0",
      "description": "the tty module from node core for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/tty-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/tty-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tty-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/tty-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/tty-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/tty-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "J. Ryan Stinnett <jryans@gmail.com> (https://convolv.es/)"
        }
      ],
      "group": "",
      "name": "timers-browserify",
      "version": "2.0.12",
      "description": "timers module for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/timers-browserify@2.0.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jryans/timers-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jryans/timers-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@2.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/timers-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/timers-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/timers-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John Hiesey"
        }
      ],
      "group": "",
      "name": "stream-http",
      "version": "2.8.3",
      "description": "Streaming http in the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-http@2.8.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jhiesey/stream-http#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jhiesey/stream-http.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-http@2.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/stream-http/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/stream-http/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/stream-http/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "stream-browserify",
      "version": "2.0.2",
      "description": "the stream module from node core for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/stream-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/stream-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-browserify@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/stream-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/stream-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/stream-browserify/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com>"
        }
      ],
      "group": "",
      "name": "querystring-es3",
      "version": "0.2.1",
      "description": "Node's querystring module for all engines. (ES3 compat fork)",
      "scope": "optional",
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mike-spainhower/querystring#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mike-spainhower/querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring-es3@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/querystring-es3/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/querystring-es3/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/querystring-es3/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "description": "process information for node.js and browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/shtylman/node-process#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-process.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/process/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/process/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/process/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "path-browserify",
      "version": "0.0.1",
      "description": "the path module from node core for browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/path-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/path-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/path-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/path-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/path-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "CoderPuppy <coderpup@gmail.com>"
        }
      ],
      "group": "",
      "name": "os-browserify",
      "version": "0.3.0",
      "description": "The [os](https://nodejs.org/api/os.html) module from node.js, but for browsers.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/CoderPuppy/os-browserify#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/CoderPuppy/os-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/os-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/os-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/os-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "https-browserify",
      "version": "1.0.0",
      "description": "https module compatability for browserify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/https-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/https-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/https-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/https-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/https-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)"
        }
      ],
      "group": "",
      "name": "events",
      "version": "3.2.0",
      "description": "Node's event emitter for all engines.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events@3.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Gozala/events#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/events.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/events/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/events/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/events/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)"
        }
      ],
      "group": "",
      "name": "domain-browser",
      "version": "1.2.0",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/bevry/domain-browser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/domain-browser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/domain-browser/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/domain-browser/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "crypto-browserify",
      "version": "3.12.0",
      "description": "implementation of crypto for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.12.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/crypto-browserify/crypto-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/crypto-browserify/crypto-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/crypto-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/crypto-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/crypto-browserify/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <julian@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "constants-browserify",
      "version": "1.0.0",
      "description": "node's constants module for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/constants-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/constants-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constants-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/constants-browserify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/constants-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/constants-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "console-browserify",
      "version": "1.2.0",
      "description": "Emulate console for all the browsers",
      "scope": "optional",
      "purl": "pkg:npm/console-browserify@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/console-browserify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/console-browserify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/console-browserify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/console-browserify/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/console-browserify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Devon Govett <devongovett@gmail.com>"
        }
      ],
      "group": "",
      "name": "browserify-zlib",
      "version": "0.2.0",
      "description": "Full zlib module for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/devongovett/browserify-zlib"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/devongovett/browserify-zlib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/browserify-zlib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/browserify-zlib/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/browserify-zlib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert",
      "version": "1.5.0",
      "description": "The node.js assert module, re-packaged for web browsers.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert@1.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/commonjs-assert"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/commonjs-assert.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/assert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/assert/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/assert/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Joyent (http://www.joyent.com)"
        }
      ],
      "group": "",
      "name": "util",
      "version": "0.10.3",
      "description": "Node.JS util module",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/defunctzombie/node-util"
        },
        {
          "type": "vcs",
          "url": "git://github.com/defunctzombie/node-util.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/assert/node_modules/util/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "util"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/node-libs-browser/node_modules/assert/node_modules/util/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/node-libs-browser/node_modules/assert/node_modules/util/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/suguru03/neo-async"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/suguru03/neo-async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/neo-async/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/watchpack/node_modules/neo-async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchpack/node_modules/neo-async/package.json"
              }
            ],
            "concludedValue": "node_modules/watchpack/node_modules/neo-async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "memory-fs",
      "version": "0.4.1",
      "description": "A simple in-memory filesystem. Holds data in a javascript object.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memory-fs@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/memory-fs"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/webpack/memory-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/memory-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/memory-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/memory-fs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kat Marchán <kzm@zkat.tech>"
        }
      ],
      "group": "",
      "name": "json-parse-better-errors",
      "version": "1.0.2",
      "description": "JSON.parse with context information on error",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zkat/json-parse-better-errors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/zkat/json-parse-better-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/json-parse-better-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/json-parse-better-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/json-parse-better-errors/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/inherits#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/inherits.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errno",
      "version": "0.1.8",
      "description": "libuv errno details exposed",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/errno@0.1.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/node-errno#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/rvagg/node-errno.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errno@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/errno/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/errno/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/package.json"
              }
            ],
            "concludedValue": "node_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rod Vagg <rod@vagg.org> (https://github.com/rvagg)"
        }
      ],
      "group": "",
      "name": "prr",
      "version": "1.0.1",
      "description": "A better Object.defineProperty()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prr@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/prr"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/rvagg/prr.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prr@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/errno/node_modules/prr/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/errno/node_modules/prr/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/node_modules/prr/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/node_modules/prr/package.json"
              }
            ],
            "concludedValue": "node_modules/enhanced-resolve/node_modules/memory-fs/node_modules/errno/node_modules/prr/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Trent Mick"
        },
        {
          "name": " Sam Saccone"
        }
      ],
      "group": "",
      "name": "chrome-trace-event",
      "version": "1.0.2",
      "description": "A library to create a trace of your node app per Google's Trace Event format.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chrome-trace-event@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "github.com:samccone/chrome-trace-event"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chrome-trace-event@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/chrome-trace-event/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/chrome-trace-event/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/chrome-trace-event/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "description": "Runtime library for TypeScript helper functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/Microsoft/tslib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/chrome-trace-event/node_modules/tslib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webpack/node_modules/chrome-trace-event/node_modules/tslib/package.json"
              }
            ],
            "concludedValue": "node_modules/webpack/node_modules/chrome-trace-event/node_modules/tslib/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-module-context",
      "version": "1.9.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-module-context@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-module-context@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webpack/node_modules/@webassemblyjs/helper-module-context/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/helper-module-context/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/helper-module-context/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/helper-module-context/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "watchpack",
      "version": "1.7.5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/watchpack@1.7.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/watchpack"
        },
        {
          "type": "vcs",
          "url": "https://github.com/webpack/watchpack.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@1.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchpack/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchpack/package.json"
              }
            ],
            "concludedValue": "node_modules/watchpack/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "watchpack-chokidar2",
      "version": "2.0.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/watchpack-chokidar2@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/watchpack"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/webpack/watchpack.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack-chokidar2@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchpack/node_modules/watchpack-chokidar2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchpack/node_modules/watchpack-chokidar2/package.json"
              }
            ],
            "concludedValue": "node_modules/watchpack/node_modules/watchpack-chokidar2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com)"
        }
      ],
      "group": "",
      "name": "chokidar",
      "version": "2.1.8",
      "description": "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@2.1.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/chokidar"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/paulmillr/chokidar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@2.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/watchpack/node_modules/watchpack-chokidar2/node_modules/chokidar/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/watchpack/node_modules/watchpack-chokidar2/node_modules/chokidar/package.json"
              }
            ],
            "concludedValue": "node_modules/watchpack/node_modules/watchpack-chokidar2/node_modules/chokidar/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "webpack Contrib Team"
        }
      ],
      "group": "",
      "name": "terser-webpack-plugin",
      "version": "1.4.5",
      "description": "Terser plugin for webpack",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/terser-webpack-plugin@1.4.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack-contrib/terser-webpack-plugin"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser-webpack-plugin@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "worker-farm",
      "version": "1.7.0",
      "description": "Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/worker-farm@1.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/node-worker-farm"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/rvagg/node-worker-farm.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/worker-farm@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/worker-farm/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/worker-farm/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/worker-farm/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-wsl",
      "version": "1.1.0",
      "description": "Check if the process is running inside Windows Subsystem for Linux (Bash on Windows)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-wsl@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/is-wsl#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/is-wsl.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/is-wsl/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/is-wsl/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/is-wsl/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kat Marchán <kzm@sykosomatic.org>"
        }
      ],
      "group": "",
      "name": "cacache",
      "version": "12.0.4",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cacache@12.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/cacache#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/cacache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacache@12.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "y18n",
      "version": "4.0.1",
      "description": "the bare-bones internationalization library used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/y18n@4.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/y18n"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/yargs/y18n.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/y18n/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/y18n/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/y18n/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "",
      "name": "unique-filename",
      "version": "1.1.1",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unique-filename@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/unique-filename"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/iarna/unique-filename.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-filename@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/unique-filename/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/unique-filename/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/unique-filename/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kat Marchán <kzm@sykosomatic.org>"
        }
      ],
      "group": "",
      "name": "ssri",
      "version": "6.0.1",
      "description": "Standard Subresource Integrity library --  parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ssri@6.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zkat/ssri#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/zkat/ssri.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ssri@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/ssri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/ssri/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/ssri/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "",
      "name": "promise-inflight",
      "version": "1.0.1",
      "description": "One promise for multiple requests in flight to avoid async duplication",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise-inflight@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/promise-inflight#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/iarna/promise-inflight.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-inflight@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/promise-inflight/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/promise-inflight/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/promise-inflight/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "",
      "name": "move-concurrently",
      "version": "1.0.1",
      "description": "Promises of moves of files or directories with rename, falling back to recursive rename/copy on EXDEV errors, with configurable concurrency and win32 junction support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/move-concurrently@1.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.npmjs.com/package/move-concurrently"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/move-concurrently.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/move-concurrently@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/move-concurrently/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/move-concurrently/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/move-concurrently/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "max ogden"
        }
      ],
      "group": "",
      "name": "mississippi",
      "version": "3.0.0",
      "description": "a collection of useful streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mississippi@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/maxogden/mississippi#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/maxogden/mississippi.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mississippi@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/mississippi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/mississippi/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/mississippi/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "5.1.1",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@5.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-lru-cache#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-lru-cache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "infer-owner",
      "version": "1.0.4",
      "description": "Infer the owner of a path based on the owner of its nearest existing parent",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/infer-owner@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/infer-owner#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/infer-owner.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/infer-owner@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/infer-owner/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/infer-owner/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/infer-owner/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kat Marchán <kzm@sykosomatic.org>"
        }
      ],
      "group": "",
      "name": "figgy-pudding",
      "version": "3.5.2",
      "description": "Delicious, festive, cascading config/opts definitions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/figgy-pudding@3.5.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/figgy-pudding#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/figgy-pudding.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figgy-pudding@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/figgy-pudding/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/figgy-pudding/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/figgy-pudding/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "chownr",
      "version": "1.1.4",
      "description": "like `chown -R`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chownr@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/chownr#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/chownr.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chownr@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/chownr/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/chownr/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/chownr/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)"
        }
      ],
      "group": "",
      "name": "bluebird",
      "version": "3.7.2",
      "description": "Full featured Promises/A+ implementation with exceptionally good performance",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bluebird@3.7.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/petkaantonov/bluebird"
        },
        {
          "type": "vcs",
          "url": "git://github.com/petkaantonov/bluebird.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/bluebird/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/bluebird/package.json"
              }
            ],
            "concludedValue": "node_modules/terser-webpack-plugin/node_modules/cacache/node_modules/bluebird/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)"
        }
      ],
      "group": "",
      "name": "terser",
      "version": "4.8.0",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit for ES6+",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/terser@4.8.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://terser.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@4.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser/package.json"
              }
            ],
            "concludedValue": "node_modules/terser/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.19",
      "description": "Fixes stack traces for files with source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.19",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/evanw/node-source-map-support#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/evanw/node-source-map-support.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/terser/node_modules/source-map-support/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/terser/node_modules/source-map-support/package.json"
              }
            ],
            "concludedValue": "node_modules/terser/node_modules/source-map-support/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "tapable",
      "version": "1.1.3",
      "description": "Just a little module for plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tapable@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/tapable"
        },
        {
          "type": "vcs",
          "url": "http://github.com/webpack/tapable.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tapable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tapable/package.json"
              }
            ],
            "concludedValue": "node_modules/tapable/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eric Ferraiuolo <edf@ericf.me>"
        }
      ],
      "group": "",
      "name": "serialize-javascript",
      "version": "4.0.0",
      "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serialize-javascript@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yahoo/serialize-javascript"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yahoo/serialize-javascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/serialize-javascript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/serialize-javascript/package.json"
              }
            ],
            "concludedValue": "node_modules/serialize-javascript/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "webpack Contrib (https://github.com/webpack-contrib)"
        }
      ],
      "group": "",
      "name": "schema-utils",
      "version": "1.0.0",
      "description": "webpack Validation Utils",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/schema-utils@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack-contrib/schema-utils"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/schema-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/schema-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/schema-utils/package.json"
          }
        ]
      },
      "tags": [
        "validation"
      ]
    },
    {
      "group": "",
      "name": "ajv-errors",
      "version": "1.0.1",
      "description": "Custom error messages in JSON-Schema for Ajv validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv-errors@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/ajv-errors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/ajv-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-errors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/schema-utils/node_modules/ajv-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/schema-utils/node_modules/ajv-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/schema-utils/node_modules/ajv-errors/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.7",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/bestiejs/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pkg-dir",
      "version": "3.0.0",
      "description": "Find the root directory of a Node.js project or npm package",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pkg-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pkg-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/pkg-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "description": "`Start a promise chain",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-try/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-try/package.json"
              }
            ],
            "concludedValue": "node_modules/p-try/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-locate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/locate-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sindresorhus/path-exists#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sindresorhus/path-exists.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/locate-path/node_modules/path-exists/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/locate-path/node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/locate-path/node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "loader-runner",
      "version": "2.4.0",
      "description": "Runs (webpack) loaders",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loader-runner@2.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/loader-runner#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/webpack/loader-runner.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/loader-runner/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/loader-runner/package.json"
              }
            ],
            "concludedValue": "node_modules/loader-runner/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "2.1.0",
      "description": "Finds the common standard cache directory",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-cache-dir@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-cache-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-cache-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/find-cache-dir/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "4.0.3",
      "description": "ECMAScript scope analyzer for ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-scope@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/eslint/eslint-scope"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/node_modules/estraverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "description": "ECMAScript AST recursive visitor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/estools/esrecurse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/node_modules/esrecurse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/node_modules/esrecurse/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/node_modules/esrecurse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/node_modules/esrecurse/node_modules/estraverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/node_modules/esrecurse/node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/node_modules/esrecurse/node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "enhanced-resolve",
      "version": "4.5.0",
      "description": "Offers a async require.resolve function. It's highly configurable.",
      "scope": "optional",
      "purl": "pkg:npm/enhanced-resolve@4.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/webpack/enhanced-resolve"
        },
        {
          "type": "vcs",
          "url": "git://github.com/webpack/enhanced-resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/enhanced-resolve/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/enhanced-resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/enhanced-resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tobias Koppers @sokra"
        }
      ],
      "group": "",
      "name": "memory-fs",
      "version": "0.5.0",
      "description": "A simple in-memory filesystem. Holds data in a javascript object.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memory-fs@0.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/webpack/memory-fs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/webpack/memory-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/enhanced-resolve/node_modules/memory-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/enhanced-resolve/node_modules/memory-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/enhanced-resolve/node_modules/memory-fs/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js-compat",
      "version": "3.9.0",
      "description": "core-js compat",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js-compat@3.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zloirock/core-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js-compat@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-js-compat/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "core-js-compat/compat,core-js-compat/modules"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-js-compat/package.json"
              }
            ],
            "concludedValue": "node_modules/core-js-compat/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 13
          },
          {
            "location": "index.js",
            "line": 14
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "3.9.0",
      "description": "Standard library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@3.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zloirock/core-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-js/package.json"
              }
            ],
            "concludedValue": "node_modules/core-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "description": "the complete solution for node.js command-line programs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tj/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/commander/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/commander/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "6.4.2",
      "description": "ECMAScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@6.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@6.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "wast-printer",
      "version": "1.9.0",
      "description": "WebAssembly text format printer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wast-printer@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wast-printer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/wast-printer/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/wast-printer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Wirtz <dcode@dcode.io>"
        }
      ],
      "group": "@xtuc",
      "name": "long",
      "version": "4.2.2",
      "description": "A Long class for representing a 64-bit two's-complement integer value.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40xtuc/long@4.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dcodeIO/long.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/dcodeIO/long.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/long@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wast-printer/node_modules/@xtuc/long/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/leb128/node_modules/@xtuc/long/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ast/node_modules/@xtuc/long/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ast/node_modules/@xtuc/long/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ast/node_modules/@xtuc/long/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "wast-parser",
      "version": "1.9.0",
      "description": "WebAssembly text format parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wast-parser@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wast-parser@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wast-printer/node_modules/@webassemblyjs/wast-parser/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Mauro Bringolf"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-fsm",
      "version": "1.9.0",
      "description": "FSM implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-fsm@1.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-fsm@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wast-printer/node_modules/@webassemblyjs/helper-fsm/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-fsm/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-fsm/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-fsm/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-code-frame",
      "version": "1.9.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-code-frame@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-code-frame@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wast-printer/node_modules/@webassemblyjs/helper-code-frame/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-code-frame/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ast/node_modules/@webassemblyjs/wast-parser/node_modules/@webassemblyjs/helper-code-frame/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "wasm-parser",
      "version": "1.9.0",
      "description": "WebAssembly binary format parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-parser@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wasm-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/wasm-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/wasm-parser/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "wasm-opt",
      "version": "1.9.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-opt@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wasm-opt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/wasm-opt/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/wasm-opt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "wasm-gen",
      "version": "1.9.0",
      "description": "WebAssembly binary format printer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-gen@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wasm-gen/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/wasm-gen/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/wasm-gen/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "wasm-edit",
      "version": "1.9.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/wasm-edit@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/wasm-edit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/wasm-edit/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/wasm-edit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "utf8",
      "version": "1.9.0",
      "description": "UTF8 encoder/decoder for WASM",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/utf8@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/utf8@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/utf8/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/utf8/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/utf8/package.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "leb128",
      "version": "1.9.0",
      "description": "LEB128 decoder and encoder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/leb128@1.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/leb128@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/leb128/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/leb128/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/leb128/package.json"
          }
        ]
      }
    },
    {
      "group": "@webassemblyjs",
      "name": "ieee754",
      "version": "1.9.0",
      "description": "IEEE754 decoder and encoder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ieee754@1.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ieee754@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ieee754/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ieee754/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ieee754/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "@xtuc",
      "name": "ieee754",
      "version": "1.2.0",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40xtuc/ieee754@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/ieee754#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/ieee754.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xtuc/ieee754@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ieee754/node_modules/@xtuc/ieee754/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ieee754/node_modules/@xtuc/ieee754/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ieee754/node_modules/@xtuc/ieee754/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-wasm-section",
      "version": "1.9.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-section@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/helper-wasm-section/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/helper-wasm-section/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/helper-wasm-section/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-wasm-bytecode",
      "version": "1.9.0",
      "description": "WASM's Bytecode constants",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/helper-wasm-bytecode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/helper-wasm-bytecode/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/helper-wasm-bytecode/package.json"
          }
        ]
      },
      "tags": [
        "bytecode"
      ]
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-buffer",
      "version": "1.9.0",
      "description": "Buffer manipulation utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-buffer@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/helper-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/helper-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/helper-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "helper-api-error",
      "version": "1.9.0",
      "description": "Common API errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/helper-api-error@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/helper-api-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/helper-api-error/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/helper-api-error/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Sven Sauleau"
        }
      ],
      "group": "@webassemblyjs",
      "name": "ast",
      "version": "1.9.0",
      "description": "AST utils for webassemblyjs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40webassemblyjs/ast@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xtuc/webassemblyjs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@webassemblyjs/ast@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@webassemblyjs/ast/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@webassemblyjs/ast/package.json"
              }
            ],
            "concludedValue": "node_modules/@webassemblyjs/ast/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/core-js-builder@3.9.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-27T17:58:01Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, September 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'core-js-builder' with version '3.9.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from 111 source files."
    }
  ]
}