{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:7f48c87f-2fff-41c8-b447-c154afde2a50",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-24T03:23:36Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "zipkin-tracing-hapi",
      "group": "@creditkarma",
      "version": "1.0.4",
      "description": "Zipkin tracing for thrift-server-hapi",
      "purl": "pkg:npm/%40creditkarma/zipkin-tracing-hapi@1.0.4",
      "bom-ref": "pkg:npm/@creditkarma/zipkin-tracing-hapi@1.0.4",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "clean, lint, format, prebuild, build, test, test:only"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        }
      ],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@babel\\n@creditkarma\\n@hapi\\n@sideway\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@types",
      "name": "hapi",
      "version": "18.0.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae13adbdaac5da46b83408c4511456130c7df280ed3a269060b90f766b00d325dee54e9af7f6098c023f26d1384a7590faf4eb08a48385519c427819a87ad4ec"
        }
      ],
      "purl": "pkg:npm/%40types/hapi@18.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/hapi/-/hapi-18.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/hapi@18.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/hapi/-/hapi-18.0.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/hapi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "boom",
      "version": "7.3.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bcfba080359cff0668330136e8297bc40ed3b74874a3f3aa26714ff6a4c0a451086a860b9c07cb2072675169d5c312f5c5462461304d2b7328f51888f72c2f7"
        }
      ],
      "purl": "pkg:npm/%40types/boom@7.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/boom/-/boom-7.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/boom@7.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/boom/-/boom-7.3.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/boom"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "catbox",
      "version": "10.0.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2f8e73357b21cac167dc6eaeea6f634de25b54826e2756c4fd40833a216e0aab16d06df40b6d102935337e07786f1efb854c7caf8498d9ac1637c0d3e9e2d8c"
        }
      ],
      "purl": "pkg:npm/%40types/catbox@10.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/catbox/-/catbox-10.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/catbox@10.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/catbox/-/catbox-10.0.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/catbox"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "iron",
      "version": "5.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb5979c4ee41b4b94f7de8b2eb4beb0bd637d1c47c80cedc843e67a480044d968e946a13f0a1eab504299a55397597a384949f201497d330479ca5bed1fc39a8"
        }
      ],
      "purl": "pkg:npm/%40types/iron@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/iron/-/iron-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/iron@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/iron/-/iron-5.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/iron"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "16.11.41",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9aaa182b64e75637641a4f2a5c054673fc7d9d2693a52ac5686166e370541f721da015749ed6ba85868699d3af20c95b1c96d41157a7de0bf0a70a2f01928d75"
        }
      ],
      "purl": "pkg:npm/%40types/node@16.11.41",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-16.11.41.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@16.11.41",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-16.11.41.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mimos",
      "version": "3.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ed4ad50fb87a49f8b54af9ed4af526c3d95d3420e02a00a8155640519827471b6d1541a13728eb7b1629dc927635bb2c9936aecc285e381acd1fa27daff688a"
        }
      ],
      "purl": "pkg:npm/%40types/mimos@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mimos/-/mimos-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mimos@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mimos/-/mimos-3.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mimos"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mime-db",
      "version": "1.43.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90664963e47e5a7479464f913c750c111b5bdaa05156220708176d52b63e366c2e19bf2941d7d3a9088228faf1a5da32725f0a5a6d832dd929a1276de3bf57a1"
        }
      ],
      "purl": "pkg:npm/%40types/mime-db@1.43.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mime-db/-/mime-db-1.43.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mime-db@1.43.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mime-db/-/mime-db-1.43.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mime-db"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "podium",
      "version": "1.0.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75c83c579c0a82bbcd20193687380ade01e86d9d2eee95d6dfa36281f26afa5040fbf7ea23a1802346dd8cb0049190baec4b1a544aed78f92a8a924fb2cccded"
        }
      ],
      "purl": "pkg:npm/%40types/podium@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/podium/-/podium-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/podium@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/podium/-/podium-1.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/podium"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "shot",
      "version": "4.0.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d4256c432985a6994a555c3599efc84522ba9bfe1a3d4682aa040151270e0e1ce4b7a82282a170b2ceb7e67f6e256cee023987ea2f488458d02b39f284616f6"
        }
      ],
      "purl": "pkg:npm/%40types/shot@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/shot/-/shot-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/shot@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/shot/-/shot-4.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/shot"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "joi",
      "version": "17.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "397e5d1ba0d36dcaff91b3058f4286631b9ec3af473dc004dcafec669115da73fa7bf8ff0b41d5f8736204f0804b1771e53ec33286b4b3c51e1d63276fa9f6cf"
        }
      ],
      "purl": "pkg:npm/joi@17.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/joi/-/joi-17.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/joi@17.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/joi/-/joi-17.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "hoek",
      "version": "9.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdceab7f85099661e50bd6f905a36fcc0705bfb1d9d901da5740f8fc736505dbc59ef42af11238918761c8f0a5ed78fea16bd3590f2e8e1a92e772c88007ba29"
        }
      ],
      "purl": "pkg:npm/%40hapi/hoek@9.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/hoek/-/hoek-9.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/hoek@9.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/hoek/-/hoek-9.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "topo",
      "version": "5.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e84192898a0ece6f404c01805f70993c77bed0b4e7bb5a8e28c7b7dfd65418a0d3406fa8f0718d6771da32d9ef70419cef372ece0d90982642bc93399c02702"
        }
      ],
      "purl": "pkg:npm/%40hapi/topo@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/topo/-/topo-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/topo@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/topo/-/topo-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sideway",
      "name": "address",
      "version": "4.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eefc2afab3875568f25f156547be80827be1cbc23dae9ce3a2c4c44af9a135e5ce5dd659075e4597e4c8f71d52887647e49bf6c1319db92c450c86aad26dc353"
        }
      ],
      "purl": "pkg:npm/%40sideway/address@4.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sideway/address/-/address-4.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sideway/address@4.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sideway/address/-/address-4.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sideway",
      "name": "formula",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc77bbc19e0d39755f92845bf13e68b6210d5654fb6b72008b0ec7e4cdbe18efbd08381c55452c5f5cda940ced0a6c323abd9151318976007e66f495aa67479a"
        }
      ],
      "purl": "pkg:npm/%40sideway/formula@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sideway/formula/-/formula-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sideway/formula@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sideway/formula/-/formula-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sideway",
      "name": "pinpoint",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44d88ea133e4a6d16d495cd07af63fc96b59c1ffd1c725673f2fce700f4704cdcc9460e704460be41e351f43139f451e73c1e2fb6a94b537c6d9659906631e8d"
        }
      ],
      "purl": "pkg:npm/%40sideway/pinpoint@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sideway/pinpoint/-/pinpoint-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sideway/pinpoint@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sideway/pinpoint/-/pinpoint-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zipkin",
      "version": "0.15.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90acd161612b5bdddb2e1d24cf218f6bbad0378f4837e4dd79658336b179aff0755723db8f41ea9b0a768746ec4626ae91df83063a6b8f6d866dab4e0a30d558"
        }
      ],
      "purl": "pkg:npm/zipkin@0.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zipkin/-/zipkin-0.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zipkin@0.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zipkin/-/zipkin-0.15.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "zipkin,Instrumentation,zipkin/Instrumentation,option,zipkin/option,TraceId,zipkin/TraceId"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/main/ZipkinTracingHapi.js",
            "line": 7
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 14
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa53f8ffa94a5017d08d9da97714e166f2d401a7e665bf0e03115bf175ed890992df920d82bf3985d386a04b35db87b3d450a7649b7a8dabbf4fe6a5879f1015"
        }
      ],
      "purl": "pkg:npm/is-promise@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@creditkarma",
      "name": "thrift-server-core",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268a24e6e149a8f78cfc3d2d69274a1dea1ead907a1dba120cca810d68550c95522891963d231c87818d00b46aafc9c27a42ca31891d0a08f814055eb67c6918"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40creditkarma/thrift-server-core@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/thrift-server-core/-/thrift-server-core-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/thrift-server-core/-/thrift-server-core-1.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@creditkarma/thrift-server-core"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/main/ZipkinTracingHapi.js",
            "line": 4
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 1
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 70
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 72
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 73
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 84
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "lodash",
      "version": "4.14.182",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd31f28aac9000ff407c0468e2917e68219cca243de2d5ff22cd88ec7a1f351aa860b80dd4f068396bb6ff34c0e73331ccfe4416eb4cb56b4600544a51ef7ad5"
        }
      ],
      "purl": "pkg:npm/%40types/lodash@4.14.182",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/lodash/-/lodash-4.14.182.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/lodash@4.14.182",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/lodash/-/lodash-4.14.182.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@creditkarma",
      "name": "thrift-server-hapi",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2185203ea5241550c89056dce84439e599ab492b9a842cfacef422115043fceba324c0b785bac8b608eb7d6affeb5737d5ae3472192763bc6faa47877efe1390"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40creditkarma/thrift-server-hapi@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/thrift-server-hapi/-/thrift-server-hapi-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@creditkarma/thrift-server-hapi@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/thrift-server-hapi/-/thrift-server-hapi-1.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@creditkarma/thrift-server-hapi,ThriftHapiPlugin,@creditkarma/thrift-server-hapi/ThriftHapiPlugin"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "hapi",
      "version": "20.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72b854e9320ab7b42c92c58b61cb430405e8824f4f6009bb533769113cae0470b6a426baffe0793729223952c6ff71422201e8feb68f56d6a7f1b62d0721ce45"
        }
      ],
      "purl": "pkg:npm/%40hapi/hapi@20.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/hapi/-/hapi-20.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/hapi@20.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/hapi/-/hapi-20.2.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@hapi/hapi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "accept",
      "version": "5.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a6cc1c7f6d7511f38e757e7651b99009465ce09b4260bb9765b535ff6ecce647696179bf41a72378ed0d516da193b2f1739f43d7004b3e9570ca7ec85c71867"
        }
      ],
      "purl": "pkg:npm/%40hapi/accept@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/accept/-/accept-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/accept@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/accept/-/accept-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "boom",
      "version": "9.1.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ecd681fc8da375bcdb2a71a1d5609aca9a031c2ac0b5c1ca7c6ee8ef5eb1da02a0f688362adc7a0ec2cc70a34f42b9d6b94799c2d28d08c65ae54eebcfbb34b"
        }
      ],
      "purl": "pkg:npm/%40hapi/boom@9.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/boom/-/boom-9.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/boom@9.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/boom/-/boom-9.1.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@hapi/boom"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 16
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "ammo",
      "version": "5.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15b08dc1c4db9d03f85586212cd199980efac5bd9a1e0f4030f8b2d7c359c96306df5d0fe4a7451b203dbf6ae6e6e8eb227cbbedd10422430ec25d17bfe7d248"
        }
      ],
      "purl": "pkg:npm/%40hapi/ammo@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/ammo/-/ammo-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/ammo@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/ammo/-/ammo-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "bounce",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25eb16f76bb2cce3b2bb324a8e82c73354e188ebc73ce2c31f0d35615f328799c2b28eec0f0261a3587401dd8df84eb66d9cb3e3a4c6df18408bfefc1ac72de8"
        }
      ],
      "purl": "pkg:npm/%40hapi/bounce@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/bounce/-/bounce-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/bounce@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/bounce/-/bounce-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "call",
      "version": "8.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ce7dfe864dd3a7a1ee5bf285d157797091049bfcb016ca5bc331a7ba4601165a7b5dd121ed9186d0ba40c72a57da62d5674808086af27492ab3317f00805bea"
        }
      ],
      "purl": "pkg:npm/%40hapi/call@8.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/call/-/call-8.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/call@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/call/-/call-8.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "catbox",
      "version": "11.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bbff07bc1edd0ffe97f21b19229b24483a38c8c2a91f115decd96ea329611ab2fa7147d8c5d40f9ef529f585360ba17d86cc8154b1ae94177dbc137579b7d739"
        }
      ],
      "purl": "pkg:npm/%40hapi/catbox@11.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/catbox/-/catbox-11.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/catbox@11.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/catbox/-/catbox-11.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "podium",
      "version": "4.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "963b0a190ccb905aa743113ba9e6a7be01a3e1d7a39dc884ad8777d1d6eb63350e17f1724bf0ce17deea72b4f76e1a15c02626c5ae8f10c8717c23e59d4703da"
        }
      ],
      "purl": "pkg:npm/%40hapi/podium@4.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/podium/-/podium-4.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/podium@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/podium/-/podium-4.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "teamwork",
      "version": "5.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d683f1f401394c8bfe57a221e7844ff654d906ca37acff23e1785bea2495c0f5ed00cfac0e8a65e5314cbf93dac3bdd49e9649f608dcad3135057ad6b7d790ae"
        }
      ],
      "purl": "pkg:npm/%40hapi/teamwork@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/teamwork/-/teamwork-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/teamwork@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/teamwork/-/teamwork-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "validate",
      "version": "1.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd7311d0dd308f0d13c33ab6a503b33c16650f391e9067280adccedf5e01a4812c6d77581ad85051bc609060dfe27864d7e20f0c0b17a968cca2145060ed3a50"
        }
      ],
      "purl": "pkg:npm/%40hapi/validate@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/validate/-/validate-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/validate@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/validate/-/validate-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "catbox-memory",
      "version": "5.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "416c3d9ce609ab93e5bc284b595f22ea14072587ef76a89776f4eea49161d1ea8b67ae178abee628d8bde9de7f64c500a973eeaec7cd0c80f18c582810352a79"
        }
      ],
      "purl": "pkg:npm/%40hapi/catbox-memory@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/catbox-memory/-/catbox-memory-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/catbox-memory@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/catbox-memory/-/catbox-memory-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "heavy",
      "version": "7.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc9fefcd1435dccb51cf3e90778cd11d64b715a51cff9ba2bd5d9322e13119333d424fbb673aa3d1ed86ec4a44e8aced3bd49a9536e22244e1eea14a8ffdf770"
        }
      ],
      "purl": "pkg:npm/%40hapi/heavy@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/heavy/-/heavy-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/heavy@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/heavy/-/heavy-7.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "mimos",
      "version": "6.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a9ffaeedaf523e25a7cddd1dd73790ee7154b12914ff4dcfad52ccc3c04368369a25c5e5e486b2760b3b7a07a000aab7aca47a22be1819056612b8034df505e"
        }
      ],
      "purl": "pkg:npm/%40hapi/mimos@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/mimos/-/mimos-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/mimos@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/mimos/-/mimos-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "shot",
      "version": "5.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7900c499e7e8fe3da6bc29d7c2a0a87e92507bf28b7117ebdc251fc8a0df75568d9ee6e957216e8752c153094fb85ba3ff12d6a2a7d9e6740c76cd60e2981d8"
        }
      ],
      "purl": "pkg:npm/%40hapi/shot@5.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/shot/-/shot-5.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/shot@5.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/shot/-/shot-5.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "somever",
      "version": "3.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e194d23776001ed82963f33818eb47517822eae66d1bd9c465f348e90ac0ae12b45cdfd10d58228e56fd90e997c0247955c9434a406e97d141be14ae297c7dfb"
        }
      ],
      "purl": "pkg:npm/%40hapi/somever@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/somever/-/somever-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/somever@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/somever/-/somever-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "statehood",
      "version": "7.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1626ba6adae839599ce7ed9b34ec45e99bfdbe96cd02311735c51b5976af0ea86724395c870514c0a4b92c28b9986b424f146150a287c2ec6e05926498b67b7f"
        }
      ],
      "purl": "pkg:npm/%40hapi/statehood@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/statehood/-/statehood-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/statehood@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/statehood/-/statehood-7.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "bourne",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b506968d0d52c975104429e2569153bab585fa0cc141bb03214ae5aa2ec638b9f79328656e579ac1b148713dac97aa79d61e05d402658ad7a1ffca43b95a3e1"
        }
      ],
      "purl": "pkg:npm/%40hapi/bourne@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/bourne/-/bourne-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/bourne@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/bourne/-/bourne-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "cryptiles",
      "version": "5.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e8f7e77505ae7f148a0cc927cca8f051ffb3dadbd27646c88fae5edb930a395b9a3e00dd5d0184118b848facfc305715462a380b3845abb2fb750689c949f2c"
        }
      ],
      "purl": "pkg:npm/%40hapi/cryptiles@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/cryptiles/-/cryptiles-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/cryptiles@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/cryptiles/-/cryptiles-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "iron",
      "version": "6.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cef1af583b9f8931a94c93c6d58fcc70df14a9606ed24ff1b3fee5fbe1d5539df934b1d7b07872e7871f10c756ec48f029f6c17ccf57cb6e459938a86dbec7bf"
        }
      ],
      "purl": "pkg:npm/%40hapi/iron@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/iron/-/iron-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/iron@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/iron/-/iron-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "b64",
      "version": "5.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e0bb4b52126adece888868d186eab46f28e52452e0dd7f85d33e738d1c661f4864660ea3d95f9a092fa1c074a4e8d544071026dd0783b3856adf815a698c753"
        }
      ],
      "purl": "pkg:npm/%40hapi/b64@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/b64/-/b64-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/b64@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/b64/-/b64-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "subtext",
      "version": "7.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63bda6a0785b46e3bc9300471449c2470ee83a784d8783e5f9aa27c40cded7c8e4c8ca44e06c33e253480fb7a2f2f7779695c2dab29d9315c982d7d8f96b6d47"
        }
      ],
      "purl": "pkg:npm/%40hapi/subtext@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/subtext/-/subtext-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/subtext@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/subtext/-/subtext-7.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "content",
      "version": "5.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ab7b8765d7281de19c8e1f7b62601ace501cd5ecfbbf10eb3c54b19fe7cbed38410259e77c52ec3a078891f4037ff2e42de36b41d38aa955a332a0c421d2833"
        }
      ],
      "purl": "pkg:npm/%40hapi/content@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/content/-/content-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/content@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/content/-/content-5.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "file",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "592ae5829bc4aa03d6908d7c9241842c465f5ebd1b60bb6bd7a8883782ab87db119f305937a9e75b11c5c6db273faf38c2e784c9205b5cf0e0fd67c0f7125d05"
        }
      ],
      "purl": "pkg:npm/%40hapi/file@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/file/-/file-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/file@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/file/-/file-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "pez",
      "version": "5.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a98a4611263b6b6c981d0c71bf1fdc92a98ab027e414fc3ec55ec61c892f4fecd6015c4d9ac8a0c0cb71f4a2ee82a213826b13ee4d5e126740fddfaf95a261c"
        }
      ],
      "purl": "pkg:npm/%40hapi/pez@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/pez/-/pez-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/pez@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/pez/-/pez-5.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "nigel",
      "version": "4.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86dd8aa04b035b6d81c5038490b1096aa7e9a0a3d7c62eedbda6d7cbb07fefb785b4ec86e5912cb5f670c4741ca80899869e7c01ee6f92112a234de46b091837"
        }
      ],
      "purl": "pkg:npm/%40hapi/nigel@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/nigel/-/nigel-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/nigel@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/nigel/-/nigel-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "vise",
      "version": "4.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "798c8b92e5221594deaf9f61f921b2ee1526faa13da7e51e99e3d31cb9485a9a4477ec04c67dc37f98ced386c54139bb9e5785e55f02b6e61061bf9516967a4a"
        }
      ],
      "purl": "pkg:npm/%40hapi/vise@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/vise/-/vise-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/vise@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/vise/-/vise-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@hapi",
      "name": "wreck",
      "version": "17.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a49e648d8a113d80eff9e22e88b42a846a27df8d5faf66cd218663ba8b6e3c91bfdc8973aff5ed23e240a7403ce84d9b61fb12df304f001b92d880a4697153f2"
        }
      ],
      "purl": "pkg:npm/%40hapi/wreck@17.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hapi/wreck/-/wreck-17.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hapi/wreck@17.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hapi/wreck/-/wreck-17.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "hapi__hapi",
      "version": "20.0.12",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07ed1f71e0b316f6c8395bf9616399cdb1ed11f7fc04b9461f77adae470e79dca3ec5d2e9c2e458f315f69a3b9830961243757d1c9a631e460da9c1174c6b609"
        }
      ],
      "purl": "pkg:npm/%40types/hapi__hapi@20.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/hapi__hapi/-/hapi__hapi-20.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/hapi__hapi@20.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/hapi__hapi/-/hapi__hapi-20.0.12.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/hapi__hapi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "hapi__catbox",
      "version": "10.2.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "03a8af46b5c3e609669c99dad54006c3ced0359469fef7453bd538192f9684e316cc79f0fa84c690cbe0d20eb2d7ddf409b7a17863829bb035a87b2a1fb017aa"
        }
      ],
      "purl": "pkg:npm/%40types/hapi__catbox@10.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/hapi__catbox/-/hapi__catbox-10.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/hapi__catbox@10.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/hapi__catbox/-/hapi__catbox-10.2.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/hapi__catbox"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "hapi__mimos",
      "version": "4.1.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bd86f2691584d3feacc1e71296bc361a497ac888daa2e1ea618bee4ba3af83a10770a8f5d082655539947eb37301887a05aac099097f53995586dc773399311"
        }
      ],
      "purl": "pkg:npm/%40types/hapi__mimos@4.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/hapi__mimos/-/hapi__mimos-4.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/hapi__mimos@4.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/hapi__mimos/-/hapi__mimos-4.1.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/hapi__mimos"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "hapi__shot",
      "version": "4.1.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f305a02d53f54de1aa83366d09db7e17e935e43590bcb1b562fe99ccf7dbdc3e56228e7f4be1862ad241568dae34472a69b3f921f73bd509c94c39d39b0d5ac4"
        }
      ],
      "purl": "pkg:npm/%40types/hapi__shot@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/hapi__shot/-/hapi__shot-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/hapi__shot@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/hapi__shot/-/hapi__shot-4.1.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/hapi__shot"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@creditkarma",
      "name": "zipkin-core",
      "version": "1.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9f073e5538dc8debb966065b866747cbce2fcba3256bf4c9643d1e31877ed732d705f43947c043acdffd5f8af58cdc8f35f9ac8ee3f743b4c9521cb456c71bc"
        }
      ],
      "purl": "pkg:npm/%40creditkarma/zipkin-core@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/zipkin-core/-/zipkin-core-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@creditkarma/zipkin-core@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@creditkarma/zipkin-core/-/zipkin-core-1.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@creditkarma/zipkin-core,getTracerForService,@creditkarma/zipkin-core/getTracerForService,headersForTraceId,@creditkarma/zipkin-core/headersForTraceId,IZipkinOptions,@creditkarma/zipkin-core/IZipkinOptions,normalizeHeaders,@creditkarma/zipkin-core/normalizeHeaders"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "dist/main/ZipkinTracingHapi.js",
            "line": 5
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 10
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 59
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 77
          },
          {
            "location": "src/main/ZipkinTracingHapi.ts",
            "line": 95
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "bytebuffer",
      "version": "5.0.43",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd09d362fcb82e94a88c78ca7668389d7148d4102260fbd9fe4de8b9ccd90109db0e9ae4d71ab1262166147cb2f32e8cb94ab7b25cf97ab34cb67ea7f3bb952b"
        }
      ],
      "purl": "pkg:npm/%40types/bytebuffer@5.0.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/bytebuffer/-/bytebuffer-5.0.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/bytebuffer@5.0.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/bytebuffer/-/bytebuffer-5.0.43.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/bytebuffer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "long",
      "version": "4.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a4c6128e5b8f9b75e7b53a7c0fc1883ca73649f46249d5761e3c08c3e44d2a454d59af6a8e544269bbb8417ac41128eea20c02563f25295e61a13a54e76968"
        }
      ],
      "purl": "pkg:npm/%40types/long@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/long/-/long-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/long@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/long/-/long-4.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/long"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytebuffer",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22ecd2766003a69919e83969c9c3249bc97dcde12ad7a7d6b4bbee9c4c0589872247f047a3813cff1b39a6216ab86f996bc39698ca8717ccee46f8b3d8b1ef45"
        }
      ],
      "purl": "pkg:npm/bytebuffer@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytebuffer/-/bytebuffer-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytebuffer@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytebuffer/-/bytebuffer-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "long",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "658bcf3ce32a5303e80ec6c9691d748902589ccb998514ef1d897ad84acb2045fb460165ce2481514bebb773957dce3b4251c7a733d960fd7b83716fee878992"
        }
      ],
      "purl": "pkg:npm/long@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/long/-/long-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/long@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/long/-/long-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zipkin-transport-http",
      "version": "0.14.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad2a94d4bab1fc83521aa38903b730de7a875bad52f2a1ca16a35d17a1568658c9b355dfabdc2daadb2b9b9dce67db853a595e6693db99737660d6aae0c84a32"
        }
      ],
      "purl": "pkg:npm/zipkin-transport-http@0.14.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zipkin-transport-http/-/zipkin-transport-http-0.14.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zipkin-transport-http@0.14.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zipkin-transport-http/-/zipkin-transport-http-0.14.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3616780ac2b1edc626daf4ab040af63ef14e7bab160dfd1460b46a03ab2f51883bfbf4d27d502ee3d8d80b806f4384a6b3d49981da86060ae8a9f0e125d4f229"
        }
      ],
      "purl": "pkg:npm/node-fetch@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encoding",
      "version": "0.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11305aba8c354f7e58fd664c922a3d8e2334679c631c7989e179a364eab597f757cf796bdac467f3b9c9cb6d11ba9a928751769b71c73d2a7c4a120f409ac9dc"
        }
      ],
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b903e6f2472ce3b8f1dfc6ad01c593571ca5b506283d3ebccbd69661d57ac965d2c96f26cd26add132fa0a259d65e09d1772ab02fa55b671db4efe1137eaea75"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "1.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3b3e8c83bff208d4e6e042e9c26c1f4f74b99470165c9d639cc4387b3b437f5300c4b07caa916f90876f235be995b82771ee02c1d01a2d608d58eae23d8b27b"
        }
      ],
      "purl": "pkg:npm/prettier@1.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-1.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@1.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-1.19.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3"
        }
      ],
      "purl": "pkg:npm/rimraf@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint",
      "version": "5.20.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11c331873085b7c93efd43f9afcc1a09ffe5ce6792c9596ac6a3040d013bad6622424cbc2a9201cf5240a185df44e1eb3d9d575dde37abcc909d42ce2e205142"
        }
      ],
      "purl": "pkg:npm/tslint@5.20.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint/-/tslint-5.20.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint@5.20.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint/-/tslint-5.20.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/tslint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tslint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f626bf8d61c811ba38f477e3acb19f29b652b96a3d8933305cef826b7a51b12a5bb0c6dceff214f0d29d09955144169f54f1a7a097852fbe9938003ce08f5f12"
        }
      ],
      "purl": "pkg:npm/typescript@4.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.6.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/tsc, /app/packages/zipkin-tracing-hapi/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8805ea527f0821e05335def6c6c16581a5c790c04cb7acb81c9a75b4868ae3ae4258b4ff7c6d5aa81ef292bf798071e69417466c579659fc81e0d249d2799e22"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "highlight",
      "version": "7.17.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef2ca431517785f658da3b076441202dcfb7c78a353be7d8c942eed751b29c451037007a96e6be208427d45889c4db9c779525c89af2af0b0e87c3cbf529fc42"
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.17.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.17.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.17.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.17.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.16.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86c12715e99e896e03d3c039814019c4b0535e9677f4ff9af83183b07c35cb1ab243f8f31449f17f9b93106a7eddbcc06cd3b1535a5a4e0612e04094fc881f0f"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.16.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.16.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0a25fd7e71e401af848c92f427043343b5fe135e95615466ad7aed2df75f1b977d059db1369b8bcd2d7f9559efdda6395bf87ba0198cd6eee4171fdf073c463"
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c315c27659701a12369020b4327bd31984ccbe75594efaa0ca99224c8f0f6b9b5ccf68ba56ab2ac181a0ab05e38bee11802ce6b3a11a8c4e08c62507e871fc9d"
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7c966c4a480e013722f3f871cc53394e129834f4557e7afe9931edef262860771ce073067c5681043e600b0991bd2e6a9f56834c30aa6db48613546eae0d8ec"
        }
      ],
      "purl": "pkg:npm/diff@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/esparse, /app/packages/zipkin-tracing-hapi/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26c8e79386f0dd826a6336ddc8188db0f5873df3bef94186ef8f42c6cea9782bb95e0e27ade9dae8e571398c6b413ab0c34266c2df9179ff2b820ba69132f3f5"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.22.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c1a6eb98b98e6316c962fc922cd6895dc3a7ce402062a2886a59983fda189a3b26d739fb789689eff39b8338a5dd7fcae1c8ad79f5cc54e5c0dc2bf34a93ccf"
        }
      ],
      "purl": "pkg:npm/resolve@1.22.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb914fcb93e7c263b796f7cc6f402ca0f6811bee4a1d4234c181573ad60f9d5555b294c552e31935f35a35546ddc565a76cb6ed9cf31db7bf29115bf341a14e8"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2dd169d74bd7e076480871e3dee911cd935580f3e9ae3dae9c4a3791dd5f0adbbabd041d6b4c4dd1d69ec7bf4cf567201cf2ce95beff0323259febcd4c02dd3"
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1ab9a0dffcf65d560acb4cd60746da576b589188a71a79b88a435049769425587da50af7b141d5f9e6c9cf1722bb433a6e76a6c2234a9715f39ab0777234319"
        }
      ],
      "purl": "pkg:npm/semver@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126"
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsutils",
      "version": "2.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8392551c2209c337c849a5e95c4d6abcd6a571ae49c286fa1632380283e5a8cbac27a7ed144ec892416832154b4602bee0ac77824cdbf1464ae6de724d3bc498"
        }
      ],
      "purl": "pkg:npm/tsutils@2.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsutils@2.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint-config-prettier",
      "version": "1.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4fc3d3e034f2c6de2291c662bb0d6afe11afd2cebbdf1ed8c5b792c197ad609365011bf0c1f64097463bfec72214d6b52d9dac8b78c51524170c5fc675ee70e"
        }
      ],
      "purl": "pkg:npm/tslint-config-prettier@1.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint-config-prettier/-/tslint-config-prettier-1.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint-config-prettier@1.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint-config-prettier/-/tslint-config-prettier-1.18.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/zipkin-tracing-hapi/node_modules/.bin/tslint-config-prettier-check"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tslint-config-prettier-check"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslint-plugin-prettier",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17d7b82b4df273dc6ebeff80d2fd449a37270f0a73f12a420fc1f3a920ded1eca0df87018a7c27f498e69e746b340b381dd95e4508fbaa28e9f8ffc94f1b78bc"
        }
      ],
      "purl": "pkg:npm/tslint-plugin-prettier@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslint-plugin-prettier/-/tslint-plugin-prettier-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslint-plugin-prettier@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslint-plugin-prettier/-/tslint-plugin-prettier-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-prettier",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "092b506098002e8401c3716c0731f454e54346727f6629949692e6db6e94f2a82a6097cf398fc23caeb0c9122733187bdc748a839c32470752e01558607c2890"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-prettier@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-prettier@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-diff",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c49ba84f9f8bf7d5e567cb7079d6917fa031d93810571be064e6283caa99b9f98989bd2d2f6b5e80f04e65bd6954d808865a83940d1e3b4737c01bd0726cf1e3"
        }
      ],
      "purl": "pkg:npm/fast-diff@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-diff@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-diff/-/fast-diff-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-docblock",
      "version": "21.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4867bb18f5d04061257e6234343af6f9e342aeec03bd679a360a0efcf718f5ebb890b99d9c1becf47f751cb7a59e60b6d4e9a422336a42b3bb19fb8768b7277"
        }
      ],
      "purl": "pkg:npm/jest-docblock@21.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-21.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-docblock@21.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-21.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "lines-and-columns",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef297295eb1943f3d5dbd8e110397751f8e8e995fb802a89af917b3caaea73ddefedfcd2ca6b75069c0453c9c0517b3cab3cefaa16e384ae50660e8cb7f1e406"
        }
      ],
      "purl": "pkg:npm/lines-and-columns@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lines-and-columns@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@types/boom@7.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/catbox@10.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@16.11.41",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/iron@5.0.2",
      "dependsOn": [
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/@types/mime-db@1.43.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/mimos@3.0.3",
      "dependsOn": [
        "pkg:npm/@types/mime-db@1.43.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/podium@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/shot@4.0.1",
      "dependsOn": [
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/hoek@9.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@hapi/topo@5.1.0",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@sideway/address@4.1.4",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@sideway/formula@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@sideway/pinpoint@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/joi@17.6.0",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/topo@5.1.0",
        "pkg:npm/@sideway/address@4.1.4",
        "pkg:npm/@sideway/formula@3.0.0",
        "pkg:npm/@sideway/pinpoint@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/hapi@18.0.7",
      "dependsOn": [
        "pkg:npm/@types/boom@7.3.2",
        "pkg:npm/@types/catbox@10.0.7",
        "pkg:npm/@types/iron@5.0.2",
        "pkg:npm/@types/mimos@3.0.3",
        "pkg:npm/@types/node@16.11.41",
        "pkg:npm/@types/podium@1.0.1",
        "pkg:npm/@types/shot@4.0.1",
        "pkg:npm/joi@17.6.0"
      ]
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-promise@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zipkin@0.15.0",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/is-promise@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/lodash@4.14.182",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
      "dependsOn": [
        "pkg:npm/@types/lodash@4.14.182",
        "pkg:npm/lodash@4.17.21"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/boom@9.1.4",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/accept@5.0.2",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/ammo@5.0.1",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/bounce@2.0.0",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/call@8.0.1",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/teamwork@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@hapi/validate@1.1.3",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/topo@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/podium@4.1.3",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/teamwork@5.1.1",
        "pkg:npm/@hapi/validate@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/catbox@11.1.1",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/podium@4.1.3",
        "pkg:npm/@hapi/validate@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/catbox-memory@5.0.1",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/heavy@7.0.1",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/validate@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@hapi/mimos@6.0.0",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/shot@5.0.5",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/validate@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/somever@3.0.1",
      "dependsOn": [
        "pkg:npm/@hapi/bounce@2.0.0",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/bourne@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@hapi/cryptiles@5.1.0",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/b64@5.0.0",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/iron@6.0.0",
      "dependsOn": [
        "pkg:npm/@hapi/b64@5.0.0",
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/bourne@2.1.0",
        "pkg:npm/@hapi/cryptiles@5.1.0",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/statehood@7.0.4",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/bounce@2.0.0",
        "pkg:npm/@hapi/bourne@2.1.0",
        "pkg:npm/@hapi/cryptiles@5.1.0",
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/iron@6.0.0",
        "pkg:npm/@hapi/validate@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/content@5.0.2",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/file@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@hapi/vise@4.0.0",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/nigel@4.0.2",
      "dependsOn": [
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/vise@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/pez@5.0.3",
      "dependsOn": [
        "pkg:npm/@hapi/b64@5.0.0",
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/content@5.0.2",
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/nigel@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/wreck@17.2.0",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/bourne@2.1.0",
        "pkg:npm/@hapi/hoek@9.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/subtext@7.0.4",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/bourne@2.1.0",
        "pkg:npm/@hapi/content@5.0.2",
        "pkg:npm/@hapi/file@2.0.0",
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/pez@5.0.3",
        "pkg:npm/@hapi/wreck@17.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@hapi/hapi@20.2.2",
      "dependsOn": [
        "pkg:npm/@hapi/accept@5.0.2",
        "pkg:npm/@hapi/ammo@5.0.1",
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/bounce@2.0.0",
        "pkg:npm/@hapi/call@8.0.1",
        "pkg:npm/@hapi/catbox-memory@5.0.1",
        "pkg:npm/@hapi/catbox@11.1.1",
        "pkg:npm/@hapi/heavy@7.0.1",
        "pkg:npm/@hapi/hoek@9.3.0",
        "pkg:npm/@hapi/mimos@6.0.0",
        "pkg:npm/@hapi/podium@4.1.3",
        "pkg:npm/@hapi/shot@5.0.5",
        "pkg:npm/@hapi/somever@3.0.1",
        "pkg:npm/@hapi/statehood@7.0.4",
        "pkg:npm/@hapi/subtext@7.0.4",
        "pkg:npm/@hapi/teamwork@5.1.1",
        "pkg:npm/@hapi/topo@5.1.0",
        "pkg:npm/@hapi/validate@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/@types/hapi__catbox@10.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/hapi__mimos@4.1.4",
      "dependsOn": [
        "pkg:npm/@types/mime-db@1.43.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/hapi__shot@4.1.2",
      "dependsOn": [
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/@types/hapi__hapi@20.0.12",
      "dependsOn": [
        "pkg:npm/@hapi/boom@9.1.4",
        "pkg:npm/@hapi/iron@6.0.0",
        "pkg:npm/@hapi/podium@4.1.3",
        "pkg:npm/@types/hapi__catbox@10.2.4",
        "pkg:npm/@types/hapi__mimos@4.1.4",
        "pkg:npm/@types/hapi__shot@4.1.2",
        "pkg:npm/@types/node@16.11.41",
        "pkg:npm/joi@17.6.0"
      ]
    },
    {
      "ref": "pkg:npm/@creditkarma/thrift-server-hapi@1.0.4",
      "dependsOn": [
        "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
        "pkg:npm/@hapi/hapi@20.2.2",
        "pkg:npm/@types/hapi__hapi@20.0.12",
        "pkg:npm/zipkin@0.15.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/long@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/bytebuffer@5.0.43",
      "dependsOn": [
        "pkg:npm/@types/long@4.0.2",
        "pkg:npm/@types/node@16.11.41"
      ]
    },
    {
      "ref": "pkg:npm/long@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytebuffer@5.0.1",
      "dependsOn": [
        "pkg:npm/long@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.6.3",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/encoding@0.1.13",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-fetch@1.7.3",
      "dependsOn": [
        "pkg:npm/encoding@0.1.13",
        "pkg:npm/is-stream@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/zipkin-transport-http@0.14.3",
      "dependsOn": [
        "pkg:npm/node-fetch@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/@creditkarma/zipkin-core@1.0.4",
      "dependsOn": [
        "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
        "pkg:npm/@types/bytebuffer@5.0.43",
        "pkg:npm/bytebuffer@5.0.1",
        "pkg:npm/zipkin-transport-http@0.14.3",
        "pkg:npm/zipkin@0.15.0"
      ]
    },
    {
      "ref": "pkg:npm/prettier@1.19.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.2",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.7.1",
      "dependsOn": [
        "pkg:npm/glob@7.2.3"
      ]
    },
    {
      "ref": "pkg:npm/typescript@4.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.16.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.17.12",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.16.7",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.16.7",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.17.12"
      ]
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.1",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.6",
      "dependsOn": [
        "pkg:npm/minimist@1.2.6"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.9.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.22.1",
      "dependsOn": [
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@5.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@1.14.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsutils@2.29.0",
      "dependsOn": [
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/typescript@4.6.4"
      ]
    },
    {
      "ref": "pkg:npm/tslint@5.20.1",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.16.7",
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/commander@2.20.3",
        "pkg:npm/diff@4.0.2",
        "pkg:npm/glob@7.2.3",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/mkdirp@0.5.6",
        "pkg:npm/resolve@1.22.1",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/tsutils@2.29.0",
        "pkg:npm/typescript@4.6.4"
      ]
    },
    {
      "ref": "pkg:npm/tslint-config-prettier@1.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-diff@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-docblock@21.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-plugin-prettier@2.7.0",
      "dependsOn": [
        "pkg:npm/fast-diff@1.2.0",
        "pkg:npm/jest-docblock@21.2.0",
        "pkg:npm/prettier@1.19.1"
      ]
    },
    {
      "ref": "pkg:npm/lines-and-columns@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslint-plugin-prettier@2.3.0",
      "dependsOn": [
        "pkg:npm/eslint-plugin-prettier@2.7.0",
        "pkg:npm/lines-and-columns@1.2.4",
        "pkg:npm/prettier@1.19.1",
        "pkg:npm/tslib@1.14.1",
        "pkg:npm/tslint@5.20.1"
      ]
    },
    {
      "ref": "pkg:npm/@creditkarma/zipkin-tracing-hapi@1.0.4",
      "dependsOn": [
        "pkg:npm/@creditkarma/thrift-server-core@1.0.4",
        "pkg:npm/@creditkarma/thrift-server-hapi@1.0.4",
        "pkg:npm/@creditkarma/zipkin-core@1.0.4",
        "pkg:npm/@hapi/hapi@20.2.2",
        "pkg:npm/@types/hapi@18.0.7",
        "pkg:npm/@types/hapi__hapi@20.0.12",
        "pkg:npm/@types/node@16.11.41",
        "pkg:npm/prettier@1.19.1",
        "pkg:npm/rimraf@2.7.1",
        "pkg:npm/tslint-config-prettier@1.18.0",
        "pkg:npm/tslint-plugin-prettier@2.3.0",
        "pkg:npm/tslint@5.20.1",
        "pkg:npm/typescript@4.6.4",
        "pkg:npm/zipkin@0.15.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@creditkarma/zipkin-tracing-hapi@1.0.4"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-24T03:23:36Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'zipkin-tracing-hapi' with version '1.0.4'. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}