{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:89a3ca4b-dc0a-4555-a2ee-c7c3c82a79e5",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-24T03:23:35Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "zipkin-tracing-express",
      "group": "@creditkarma",
      "version": "1.0.4",
      "description": "Zipkin tracing for thrift-server-express",
      "purl": "pkg:npm/%40creditkarma/zipkin-tracing-express@1.0.4",
      "bom-ref": "pkg:npm/@creditkarma/zipkin-tracing-express@1.0.4",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "clean, lint, format, prebuild, build, test, test:only"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        }
      ],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@babel\\n@creditkarma\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "zipkin",
      "version": "0.15.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90acd161612b5bdddb2e1d24cf218f6bbad0378f4837e4dd79658336b179aff0755723db8f41ea9b0a768746ec4626ae91df83063a6b8f6d866dab4e0a30d558"
        }
      ],
      "purl": "pkg:npm/zipkin@0.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zipkin/-/zipkin-0.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zipkin@0.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zipkin/-/zipkin-0.15.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "zipkin,Instrumentation,zipkin/Instrumentation,option,zipkin/option,TraceId,zipkin/TraceId,Tracer,zipkin/Tracer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/main/ZipkinTracingExpress.js",
            "line": 6
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 15
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa53f8ffa94a5017d08d9da97714e166f2d401a7e665bf0e03115bf175ed890992df920d82bf3985d386a04b35db87b3d450a7649b7a8dabbf4fe6a5879f1015"
        }
      ],
      "purl": "pkg:npm/is-promise@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@creditkarma",
      "name": "thrift-server-core",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268a24e6e149a8f78cfc3d2d69274a1dea1ead907a1dba120cca810d68550c95522891963d231c87818d00b46aafc9c27a42ca31891d0a08f814055eb67c6918"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40creditkarma/thrift-server-core@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/thrift-server-core/-/thrift-server-core-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/thrift-server-core/-/thrift-server-core-1.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@creditkarma/thrift-server-core,getProtocol,@creditkarma/thrift-server-core/getProtocol,getTransport,@creditkarma/thrift-server-core/getTransport,IRequestHeaders,@creditkarma/thrift-server-core/IRequestHeaders,readThriftMethod,@creditkarma/thrift-server-core/readThriftMethod"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/main/ZipkinTracingExpress.js",
            "line": 4
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 6
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 49
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 51
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 52
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "lodash",
      "version": "4.14.182",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd31f28aac9000ff407c0468e2917e68219cca243de2d5ff22cd88ec7a1f351aa860b80dd4f068396bb6ff34c0e73331ccfe4416eb4cb56b4600544a51ef7ad5"
        }
      ],
      "purl": "pkg:npm/%40types/lodash@4.14.182",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/lodash/-/lodash-4.14.182.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/lodash@4.14.182",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/lodash/-/lodash-4.14.182.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@creditkarma",
      "name": "zipkin-core",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9f073e5538dc8debb966065b866747cbce2fcba3256bf4c9643d1e31877ed732d705f43947c043acdffd5f8af58cdc8f35f9ac8ee3f743b4c9521cb456c71bc"
        }
      ],
      "purl": "pkg:npm/%40creditkarma/zipkin-core@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/zipkin-core/-/zipkin-core-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@creditkarma/zipkin-core@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/zipkin-core/-/zipkin-core-1.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@creditkarma/zipkin-core,getTracerForService,@creditkarma/zipkin-core/getTracerForService,headersForTraceId,@creditkarma/zipkin-core/headersForTraceId,IZipkinOptions,@creditkarma/zipkin-core/IZipkinOptions,normalizeHeaders,@creditkarma/zipkin-core/normalizeHeaders"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/main/ZipkinTracingExpress.js",
            "line": 5
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 13
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 38
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 56
          },
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 75
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "bytebuffer",
      "version": "5.0.43",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd09d362fcb82e94a88c78ca7668389d7148d4102260fbd9fe4de8b9ccd90109db0e9ae4d71ab1262166147cb2f32e8cb94ab7b25cf97ab34cb67ea7f3bb952b"
        }
      ],
      "purl": "pkg:npm/%40types/bytebuffer@5.0.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/bytebuffer/-/bytebuffer-5.0.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/bytebuffer@5.0.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/bytebuffer/-/bytebuffer-5.0.43.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/bytebuffer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "long",
      "version": "4.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a4c6128e5b8f9b75e7b53a7c0fc1883ca73649f46249d5761e3c08c3e44d2a454d59af6a8e544269bbb8417ac41128eea20c02563f25295e61a13a54e76968"
        }
      ],
      "purl": "pkg:npm/%40types/long@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/long/-/long-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/long@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/long/-/long-4.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/long"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "16.11.41",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9aaa182b64e75637641a4f2a5c054673fc7d9d2693a52ac5686166e370541f721da015749ed6ba85868699d3af20c95b1c96d41157a7de0bf0a70a2f01928d75"
        }
      ],
      "purl": "pkg:npm/%40types/node@16.11.41",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-16.11.41.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@16.11.41",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-16.11.41.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytebuffer",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22ecd2766003a69919e83969c9c3249bc97dcde12ad7a7d6b4bbee9c4c0589872247f047a3813cff1b39a6216ab86f996bc39698ca8717ccee46f8b3d8b1ef45"
        }
      ],
      "purl": "pkg:npm/bytebuffer@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytebuffer/-/bytebuffer-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytebuffer@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytebuffer/-/bytebuffer-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "long",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "658bcf3ce32a5303e80ec6c9691d748902589ccb998514ef1d897ad84acb2045fb460165ce2481514bebb773957dce3b4251c7a733d960fd7b83716fee878992"
        }
      ],
      "purl": "pkg:npm/long@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/long/-/long-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/long@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/long/-/long-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zipkin-transport-http",
      "version": "0.14.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad2a94d4bab1fc83521aa38903b730de7a875bad52f2a1ca16a35d17a1568658c9b355dfabdc2daadb2b9b9dce67db853a595e6693db99737660d6aae0c84a32"
        }
      ],
      "purl": "pkg:npm/zipkin-transport-http@0.14.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zipkin-transport-http/-/zipkin-transport-http-0.14.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zipkin-transport-http@0.14.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zipkin-transport-http/-/zipkin-transport-http-0.14.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3616780ac2b1edc626daf4ab040af63ef14e7bab160dfd1460b46a03ab2f51883bfbf4d27d502ee3d8d80b806f4384a6b3d49981da86060ae8a9f0e125d4f229"
        }
      ],
      "purl": "pkg:npm/node-fetch@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encoding",
      "version": "0.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11305aba8c354f7e58fd664c922a3d8e2334679c631c7989e179a364eab597f757cf796bdac467f3b9c9cb6d11ba9a928751769b71c73d2a7c4a120f409ac9dc"
        }
      ],
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b903e6f2472ce3b8f1dfc6ad01c593571ca5b506283d3ebccbd69661d57ac965d2c96f26cd26add132fa0a259d65e09d1772ab02fa55b671db4efe1137eaea75"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "express",
      "version": "4.17.13",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9b4994cf6932000b19f8f25e74491f9ac60aea9baa97148c6b74029a1ba3da264dfecee52bdf98419604fbbce98972e9be38468804bb4757faa5a0400521378"
        }
      ],
      "purl": "pkg:npm/%40types/express@4.17.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/express/-/express-4.17.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/express@4.17.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/express/-/express-4.17.13.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "body-parser",
      "version": "1.19.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00b6289deea99ba426c19a0081ec8d92c71c4fd438016650e8fbdfc11dfb193eabe855943e0baaeac52634648c5765abefad68428071c0619ae83479a350c2f6"
        }
      ],
      "purl": "pkg:npm/%40types/body-parser@1.19.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/body-parser@1.19.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/body-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "connect",
      "version": "3.4.35",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71d798cafe0a5a8120a412124f15afa98b15cb8e380cea9e8621777ccde77b5d00989eb6452c8d9149f13095c7416450417d9e47de26e72d486720f006357d15"
        }
      ],
      "purl": "pkg:npm/%40types/connect@3.4.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/connect/-/connect-3.4.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/connect@3.4.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/connect/-/connect-3.4.35.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/connect"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "express-serve-static-core",
      "version": "4.17.29",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8c77efba74c292df610ebb0d54962ddedc13e074b21799ecdc7c7bfb378735b37824862901a653913e932addfb969319dc64dd6b79bd7a7799fcca143cd31ed"
        }
      ],
      "purl": "pkg:npm/%40types/express-serve-static-core@4.17.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.17.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/express-serve-static-core@4.17.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.17.29.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/express-serve-static-core"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "qs",
      "version": "6.9.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1466b517ad854f4f6a72bb9e040eaa613ac93d50f36a1f5afb8f77fa8d8f097b1eb161c89f6ec6f7c4ec48cb3758f35b648123e3e5497fab1a485a6f0fedd9b3"
        }
      ],
      "purl": "pkg:npm/%40types/qs@6.9.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/qs/-/qs-6.9.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/qs@6.9.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/qs/-/qs-6.9.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/qs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "range-parser",
      "version": "1.2.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10486c2ec0fa52c0ccd7216102fcb40a3afa5709a9316a850426fdc34ef056e805ef0f677da8f12ee5669e04c8a604bab2f0a79ba55ac3e3198680c22a739fb3"
        }
      ],
      "purl": "pkg:npm/%40types/range-parser@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/range-parser@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/range-parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "serve-static",
      "version": "1.13.10",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c2907188e30ed980074d92b12ed1bbfee31355fd70ea5be0f27649de6cc390c24a431b1f06f874e58fb47b00123c8bc9cac55c34c2d28f8b50fe94f3a487861"
        }
      ],
      "purl": "pkg:npm/%40types/serve-static@1.13.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.13.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/serve-static@1.13.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.13.10.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/serve-static"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mime",
      "version": "1.3.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6004f1571811a8d1fa9c7108b2f83a93606873524723d65b1f9896145bff31391c873ddbd627860dae53d1af51ce735d2342a155b75b59237e2965ab4194714f"
        }
      ],
      "purl": "pkg:npm/%40types/mime@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mime/-/mime-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mime@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mime/-/mime-1.3.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.18.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd905c397f537de847421b6ea6ae7b385f25159dd4662d3c63deddc050a40fca7d77f77663733eca429cc1a30310bfb8ab25289600435fa01b9694777cbdb5d9"
        }
      ],
      "purl": "pkg:npm/express@4.18.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.18.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.18.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "express"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/main/ZipkinTracingExpress.ts",
            "line": 17
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d802d8536b69b654ac6ebd20f70cf0bf1b2f94fac380d4b02e4fc9a4991bafc3e34009269e5c443e34771517bace365eaa71ac55dd4b9e9b06b093eefe4892f"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8452ca863cbb0cfa3ff37428598ec9d7e758385eb1c53885f07e70953c695093f9398226a470ab2ec4239b051bba0d29bda29c3f3bab2559b25d82140ce1b06"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c254042cc167a6bba51dc6c0c5157ffe815798a8a0287770f75159bdd631f0ca782e3b002f60f871f2736533ef8da9170ae82c71a5469f8e684874a88789baa"
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0df27eaba10f7062990f54165234a9aa9f90edb0d04ec408178cdf500b59eaa93e1ffdff411860f42129dfdb2cfbf4f6bf0d3e1da89d0b479c263fc344b21a2a"
        }
      ],
      "purl": "pkg:npm/body-parser@1.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dac246253697208691d70e22252368374867318ec6a5cfe7f03e2a482270f10a855977fb72e0209c41f1069c1e69570f7af0b69772a98d80b1dcdca941081a26"
        }
      ],
      "purl": "pkg:npm/destroy@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc2b1bf7ae0736848d8791a8e825cbb1b4aaf8a25e82569ef107d99d6994175781bca3bf7e291d349bf73a1e1ccc83cb7dfe0d6cb95adf56a3e4d446d39849"
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "470340f59ffb3eb2b4eab60b23314c95a17e97bde2c29ceca9120581b30b6d370b0fa70e6a8f364da59e7cf5d0bc1d9f382e008ee612127752ecdfe64c26e475"
        }
      ],
      "purl": "pkg:npm/statuses@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2beccd84d0e1517c87c966328689e23c94129bedf4421f816fe4a34f12cee027c8da76fa2d76c4b4f0fcce291ee8a57859fd7923b6ddd617d837f1dae6c91a9"
        }
      ],
      "purl": "pkg:npm/qs@6.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.10.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab95cfcada85108287906762308ad8d749af2d1be7421e36ffe1a8065156ddbd8b5cb136c71269645766f78c1ed016a85774702721aa839c12edea714efd19bf"
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecef856c28a1ac1e5619b1587ac72dc264ca69eeab3a22339b3d6272b79627ed1a03b2c97eeaa112ca364fd9dca5c16dccc42dcd77f64061ae7962464d8b2aac"
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25f9b73b20b11e1f43272736f2a1a4f8999f9293b8d40e179277834ae8cdf4c0d7ae6e280ca747be776167674df78f8444d7e46095837255ba9362ff6461e35c"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9772c2b85e8c8033704c32a47581848a1623b79a513db120e3aaed9669d23e551b82607c2ce22b2896d86050526e73da25ec4c2ad88f3bc8667918d1cf64ddf8"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfe70fc56d10194a7499ca9cb204322d5443a171506d73b005aab217b548808e1358d42c0c7ac1a5442c9519887c0a1859d633b3a525289b41d972694da352a5"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaa241b44c95812d1998f19d0853d627716b7a8aaf1b83154259ff902805ece96af7921b3a9d3f056c8cc1b76d9f8553be433c63b921090d97824fed72b0978a"
        }
      ],
      "purl": "pkg:npm/raw-body@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76afaa7a543d6a41e970e97f8145514f15483a4009d70477400bdbe11b158d2f285681630c64dcebbf702589949a49d41791f030b3a06f93be6b72b17d66a93d"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16f7994cdb86c34e1cc6502259bce2eb34c02ff9617a16966d3b6096e261e3f13de43a8cc139a16b7299375680580f1c148847ccc654bcb7af930e51aa4fad49"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619dc65329ffa3c81f289967957ee0ef1ab88323ba392ba118f29a686b2c181daa803512d203e0b53be8c992d3b7d01be9d0b885f73d755e5aae4bdcfce0a6af"
        }
      ],
      "purl": "pkg:npm/cookie@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4000f395a1dcf22715f08eef6da257270a1df47598a7cb82a9fd716b839f36ed53ec9571408ad480e5ad1dd343b4f8b2c2615b892d76563a2d2172eb28cde8ad"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cf257abc26a15a5589b609698fbe73f6232a3865233bfd029c4a6b8c2c339b7e91f97e2ed150699dfeb4c37feaeeb7fb1a88389011e5533600262447403b1d3"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6e5dc5157ed9503059d60bdaaefecbe45afdc64ddd8f7d484aff73cb9183407bb15ba8932ddf9d791dac44e9e44bef819db2b8a2c2e8e26b075a0750691084a"
        }
      ],
      "purl": "pkg:npm/finalhandler@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc9da6418335f2b1053ae75e57819285318843b45bcc0ee8cdb53d23f5c1a66ee4aa0332c209b294cc171f16499a45686249daf5dda95575573dd6133fd7a3f1"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7028ba837fd9af58aa422eb249bb1e3355efa286bdf0dd30df58f3518ad73d7db1a8e6e61461c9d2d439bbbe07de6561ef02e8b93b1e672608ab7f60f1c369d7"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89c9401de36a366ebccc5b676747bed4bdb250876fccda1ab8a53858103756f1ffbcf162785eea7d197051953e0c0f4ff5b3d7212f74ba5c68528087db7b15db"
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e43164ba8aa5bf5b9840ac72f2898505e24f41c768134ecabf6b1f7ab0c2ac0ab5a21394f8c483b300c86e7c7760033ad2a20e9d86b9df00615d6d046cca27ad"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaa5b3b8e8d214ebaa3e315ee0d3ac30b69f4e8410c0148e1294be17012ddc0d95def2ae6d3aae4f7be62d3429160317a7c02515616e3f5a8a68964eb4fa555e"
        }
      ],
      "purl": "pkg:npm/send@0.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c6b910cd8d75228ec50bd2f97a9d20fb730511bb31208256ce685b9933d8379300d7396553724d232f38cfcc60fe4dacd66dba1962ee76ffdfd73dd5209def6"
        }
      ],
      "purl": "pkg:npm/serve-static@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4c653bc8913d5df93146bc33aaa1d39c971d105a49208ba4dda1af200bc7df18002acfda733d36560326dbb071e8103ff3b4cb64bff5686136324a1527f3584"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "1.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3b3e8c83bff208d4e6e042e9c26c1f4f74b99470165c9d639cc4387b3b437f5300c4b07caa916f90876f235be995b82771ee02c1d01a2d608d58eae23d8b27b"
        }
      ],
      "purl": "pkg:npm/prettier@1.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-1.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@1.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-1.19.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3"
        }
      ],
      "purl": "pkg:npm/rimraf@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint",
      "version": "5.20.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11c331873085b7c93efd43f9afcc1a09ffe5ce6792c9596ac6a3040d013bad6622424cbc2a9201cf5240a185df44e1eb3d9d575dde37abcc909d42ce2e205142"
        }
      ],
      "purl": "pkg:npm/tslint@5.20.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint/-/tslint-5.20.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint@5.20.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint/-/tslint-5.20.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/tslint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tslint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f626bf8d61c811ba38f477e3acb19f29b652b96a3d8933305cef826b7a51b12a5bb0c6dceff214f0d29d09955144169f54f1a7a097852fbe9938003ce08f5f12"
        }
      ],
      "purl": "pkg:npm/typescript@4.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.6.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/tsc, /app/packages/zipkin-tracing-express/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8805ea527f0821e05335def6c6c16581a5c790c04cb7acb81c9a75b4868ae3ae4258b4ff7c6d5aa81ef292bf798071e69417466c579659fc81e0d249d2799e22"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "highlight",
      "version": "7.17.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef2ca431517785f658da3b076441202dcfb7c78a353be7d8c942eed751b29c451037007a96e6be208427d45889c4db9c779525c89af2af0b0e87c3cbf529fc42"
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.17.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.17.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.17.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.17.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c12715e99e896e03d3c039814019c4b0535e9677f4ff9af83183b07c35cb1ab243f8f31449f17f9b93106a7eddbcc06cd3b1535a5a4e0612e04094fc881f0f"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0a25fd7e71e401af848c92f427043343b5fe135e95615466ad7aed2df75f1b977d059db1369b8bcd2d7f9559efdda6395bf87ba0198cd6eee4171fdf073c463"
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c315c27659701a12369020b4327bd31984ccbe75594efaa0ca99224c8f0f6b9b5ccf68ba56ab2ac181a0ab05e38bee11802ce6b3a11a8c4e08c62507e871fc9d"
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec"
        }
      ],
      "purl": "pkg:npm/diff@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/esparse, /app/packages/zipkin-tracing-express/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26c8e79386f0dd826a6336ddc8188db0f5873df3bef94186ef8f42c6cea9782bb95e0e27ade9dae8e571398c6b413ab0c34266c2df9179ff2b820ba69132f3f5"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.22.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c1a6eb98b98e6316c962fc922cd6895dc3a7ce402062a2886a59983fda189a3b26d739fb789689eff39b8338a5dd7fcae1c8ad79f5cc54e5c0dc2bf34a93ccf"
        }
      ],
      "purl": "pkg:npm/resolve@1.22.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb914fcb93e7c263b796f7cc6f402ca0f6811bee4a1d4234c181573ad60f9d5555b294c552e31935f35a35546ddc565a76cb6ed9cf31db7bf29115bf341a14e8"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2dd169d74bd7e076480871e3dee911cd935580f3e9ae3dae9c4a3791dd5f0adbbabd041d6b4c4dd1d69ec7bf4cf567201cf2ce95beff0323259febcd4c02dd3"
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1ab9a0dffcf65d560acb4cd60746da576b589188a71a79b88a435049769425587da50af7b141d5f9e6c9cf1722bb433a6e76a6c2234a9715f39ab0777234319"
        }
      ],
      "purl": "pkg:npm/semver@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126"
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "2.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8392551c2209c337c849a5e95c4d6abcd6a571ae49c286fa1632380283e5a8cbac27a7ed144ec892416832154b4602bee0ac77824cdbf1464ae6de724d3bc498"
        }
      ],
      "purl": "pkg:npm/tsutils@2.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@2.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint-config-prettier",
      "version": "1.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4fc3d3e034f2c6de2291c662bb0d6afe11afd2cebbdf1ed8c5b792c197ad609365011bf0c1f64097463bfec72214d6b52d9dac8b78c51524170c5fc675ee70e"
        }
      ],
      "purl": "pkg:npm/tslint-config-prettier@1.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint-config-prettier/-/tslint-config-prettier-1.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint-config-prettier@1.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint-config-prettier/-/tslint-config-prettier-1.18.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-express/node_modules/.bin/tslint-config-prettier-check"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tslint-config-prettier-check"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint-plugin-prettier",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17d7b82b4df273dc6ebeff80d2fd449a37270f0a73f12a420fc1f3a920ded1eca0df87018a7c27f498e69e746b340b381dd95e4508fbaa28e9f8ffc94f1b78bc"
        }
      ],
      "purl": "pkg:npm/tslint-plugin-prettier@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint-plugin-prettier/-/tslint-plugin-prettier-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint-plugin-prettier@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint-plugin-prettier/-/tslint-plugin-prettier-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-prettier",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "092b506098002e8401c3716c0731f454e54346727f6629949692e6db6e94f2a82a6097cf398fc23caeb0c9122733187bdc748a839c32470752e01558607c2890"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-prettier@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-prettier@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-diff",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c49ba84f9f8bf7d5e567cb7079d6917fa031d93810571be064e6283caa99b9f98989bd2d2f6b5e80f04e65bd6954d808865a83940d1e3b4737c01bd0726cf1e3"
        }
      ],
      "purl": "pkg:npm/fast-diff@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-diff@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-docblock",
      "version": "21.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4867bb18f5d04061257e6234343af6f9e342aeec03bd679a360a0efcf718f5ebb890b99d9c1becf47f751cb7a59e60b6d4e9a422336a42b3bb19fb8768b7277"
        }
      ],
      "purl": "pkg:npm/jest-docblock@21.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-21.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-docblock@21.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-21.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "lines-and-columns",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef297295eb1943f3d5dbd8e110397751f8e8e995fb802a89af917b3caaea73ddefedfcd2ca6b75069c0453c9c0517b3cab3cefaa16e384ae50660e8cb7f1e406"
        }
      ],
      "purl": "pkg:npm/lines-and-columns@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lines-and-columns@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-promise@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zipkin@0.15.0",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/is-promise@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/lodash@4.14.182",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
      "dependsOn": [
        "pkg:npm/@types/lodash@4.14.182",
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@types/long@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@16.11.41",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/bytebuffer@5.0.43",
      "dependsOn": [
        "pkg:npm/@types/long@4.0.2",
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/long@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytebuffer@5.0.1",
      "dependsOn": [
        "pkg:npm/long@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/encoding@0.1.13",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-fetch@1.7.3",
      "dependsOn": [
        "pkg:npm/encoding@0.1.13",
        "pkg:npm/is-stream@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/zipkin-transport-http@0.14.3",
      "dependsOn": [
        "pkg:npm/node-fetch@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/@creditkarma/zipkin-core@1.0.4",
      "dependsOn": [
        "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
        "pkg:npm/@types/bytebuffer@5.0.43",
        "pkg:npm/bytebuffer@5.0.1",
        "pkg:npm/zipkin-transport-http@0.14.3",
        "pkg:npm/zipkin@0.15.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/connect@3.4.35",
      "dependsOn": [
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/@types/body-parser@1.19.2",
      "dependsOn": [
        "pkg:npm/@types/connect@3.4.35",
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/@types/qs@6.9.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/range-parser@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/express-serve-static-core@4.17.29",
      "dependsOn": [
        "pkg:npm/@types/node@16.11.41",
        "pkg:npm/@types/qs@6.9.7",
        "pkg:npm/@types/range-parser@1.2.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/mime@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/serve-static@1.13.10",
      "dependsOn": [
        "pkg:npm/@types/mime@1.3.2",
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/@types/express@4.17.13",
      "dependsOn": [
        "pkg:npm/@types/body-parser@1.19.2",
        "pkg:npm/@types/express-serve-static-core@4.17.29",
        "pkg:npm/@types/qs@6.9.7",
        "pkg:npm/@types/serve-static@1.13.10"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.8",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/negotiator@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/depd@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.0",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.24",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.4.1",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.1.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/object-inspect@1.12.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/get-intrinsic@1.1.2",
        "pkg:npm/object-inspect@1.12.2"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.10.3",
      "dependsOn": [
        "pkg:npm/side-channel@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.5.1",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.18",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.20.0",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/qs@6.10.3",
        "pkg:npm/raw-body@2.5.1",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.4",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.2.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.7",
      "dependsOn": [
        "pkg:npm/forwarded@0.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.18.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.15.0",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@0.18.0"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.18.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.8",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/body-parser@1.20.0",
        "pkg:npm/content-disposition@0.5.4",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.5.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@1.2.0",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@2.0.7",
        "pkg:npm/qs@6.10.3",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/safe-buffer@5.2.1",
        "pkg:npm/send@0.18.0",
        "pkg:npm/serve-static@1.15.0",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/utils-merge@1.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/prettier@1.19.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.2",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.7.1",
      "dependsOn": [
        "pkg:npm/glob@7.2.3"
      ]
    },
    {
      "ref": "pkg:npm/typescript@4.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.16.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.17.12",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.16.7",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.17.12"
      ]
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.1",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.6",
      "dependsOn": [
        "pkg:npm/minimist@1.2.6"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.9.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.22.1",
      "dependsOn": [
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@5.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@1.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsutils@2.29.0",
      "dependsOn": [
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/typescript@4.6.4"
      ]
    },
    {
      "ref": "pkg:npm/tslint@5.20.1",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.16.7",
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/commander@2.20.3",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/resolve@1.22.1",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/tsutils@2.29.0",
        "pkg:npm/typescript@4.6.4"
      ]
    },
    {
      "ref": "pkg:npm/tslint-config-prettier@1.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-diff@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-docblock@21.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-plugin-prettier@2.7.0",
      "dependsOn": [
        "pkg:npm/fast-diff@1.2.0",
        "pkg:npm/jest-docblock@21.2.0",
        "pkg:npm/prettier@1.19.1"
      ]
    },
    {
      "ref": "pkg:npm/lines-and-columns@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslint-plugin-prettier@2.3.0",
      "dependsOn": [
        "pkg:npm/eslint-plugin-prettier@2.7.0",
        "pkg:npm/lines-and-columns@1.2.4",
        "pkg:npm/prettier@1.19.1",
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/tslint@5.20.1"
      ]
    },
    {
      "ref": "pkg:npm/@creditkarma/zipkin-tracing-express@1.0.4",
      "dependsOn": [
        "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
        "pkg:npm/@creditkarma/zipkin-core@1.0.4",
        "pkg:npm/@types/express@4.17.13",
        "pkg:npm/@types/node@16.11.41",
        "pkg:npm/express@4.18.1",
        "pkg:npm/prettier@1.19.1",
        "pkg:npm/rimraf@2.7.1",
        "pkg:npm/tslint-config-prettier@1.18.0",
        "pkg:npm/tslint-plugin-prettier@2.3.0",
        "pkg:npm/tslint@5.20.1",
        "pkg:npm/typescript@4.6.4",
        "pkg:npm/zipkin@0.15.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@creditkarma/zipkin-tracing-express@1.0.4"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-24T03:23:35Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'zipkin-tracing-express' with version '1.0.4'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}