{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:ec62bf76-dcf5-4fea-a678-b65901345ea8",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-24T05:06:41Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "cssproc",
      "group": "",
      "version": "0.0.7",
      "description": "CSS URL processor",
      "purl": "pkg:npm/cssproc@0.0.7",
      "bom-ref": "pkg:npm/cssproc@0.0.7",
      "author": "Dav Glass <davglass@gmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "pretest, test"
        }
      ],
      "type": "application",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/davglass/cssproc.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "vows",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f60a62bc5fb13d1fa8d48efbc6b6d3d1a0bf9dc5605975660aa9f0a1a0a32494a89e49067f2f16acb827f576414303490670b857e5e51a33e3336859ffb6faa"
        }
      ],
      "purl": "pkg:npm/vows@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/vows/-/vows-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vows@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/vows/-/vows-0.7.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/vows"
        },
        {
          "name": "cdx:npm:bin",
          "value": "vows"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "192ba7149ed65a9071800e6ae194d0b4801f791fad6af12776b9ea06e0cac12549316e3086c425ae7cc5d3887b6663c2a40925024e202e7d311b3549fcf0cf4d"
        }
      ],
      "purl": "pkg:npm/diff@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eyes",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a2a723ec5ced5a9f36b400e65dcbaf489bb846142341ed8fcd1a30e564627718924bb703526f6bebcd8ad360946b465a15c7ba65f9b85469307cca271c3ef15"
        }
      ],
      "purl": "pkg:npm/eyes@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eyes@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yui-lint",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21e559309a06f5fb678b4af776c2cf70842bf4183da0145d810c2ee89b5ec82400d35f10485bb0d8e57df137fb578a1484861ed380baff1115566cca8a1d6c65"
        }
      ],
      "purl": "pkg:npm/yui-lint@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yui-lint/-/yui-lint-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yui-lint@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yui-lint/-/yui-lint-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7089ae04898e1554483030a45fb72c74f4464f3f7d210651e0d4932e59c5f701226f5cd27ae20323f0fc04e6fddb8d56e5b0544d49daa387638b92503d57ecf0"
        }
      ],
      "purl": "pkg:npm/jshint@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jshint/-/jshint-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jshint/-/jshint-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/yui-lint/node_modules/.bin/jshint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jshint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccf2cc5d47f5ddfe4991c82903a1498a6f94d5f72c3d8ca619d12174db05e6b45fd64f8c1320639b1102488d2583e8b5e3713a90f4e954deb96cd682bdff9abc"
        }
      ],
      "purl": "pkg:npm/cli@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cli/-/cli-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cli/-/cli-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c67a580dff885d1e6f2df2ea758bba1bc20ec8491ae607bc8b0e68358800c052a03d3e28e84de4f49c971fbc8c1007837fdf598c7df558bd728ffb6defec1613"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff5047276d8c6b7d1bd06f694e1bb504fab26e2cd519313c9189190358d91bf76b66da6c6904fac9a38139b37e498efbb1f1c614f3abead7f1d2983375725804"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "WTFPL2",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8de55d7ca9a5a262deadff1e71eb52afa80b4b43979cb465ba19eff517f6ca3ef436c0fcb951aaae9c13a8918aa4817c553451f5f40097ad8267578d204324dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.12.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f204260bd244d92cd2058f8f260147b54343d32ec3a51f8724dd884733e67601a8bc6842e7e9ba9cf887a1e20a5a37776276eab9034e9668dcf642afbc46e30"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5edaf127805fe670e749c076d94d1fb744e90932d216990f02ea27df6dd7f66170628c335aeb016ee9f13ac8b690ee856f6f6b7876713cd1e038bfdf30da8ca1"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.0-dev",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fdcf8130bb75e3d78efbc0b5ad3f8853986222349d3871f15abfcd87793cb8eb5e7ee63b808e055ef651d7674a9ccf276dcf5b251ee97ae274cfffee754f46f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.0-dev",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/ariya/esprima/tarball/master"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.0-dev",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://github.com/ariya/esprima/tarball/master"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/yui-lint/node_modules/.bin/esparse, /app/node_modules/yui-lint/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "url"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "https://github.com/ariya/esprima/tarball/master"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "peakle",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54a3511eef96bd44097f0e98f3a85b4444c67cd72bfff9f43e219f46de57b049b5e6e3486182120f8a69f51fc7579bb14fae7c7d50f570ee5b794705c28598bb"
        }
      ],
      "purl": "pkg:npm/peakle@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/peakle/-/peakle-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/peakle@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/peakle/-/peakle-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5245cb06e533009c246a5ff47989d0b3c2e95d0e20aca2f990fb40d11914ce18f592152fc3967677bd7b1914d17250d643e635e325a488cf5c257d82c121f1a7"
        }
      ],
      "purl": "pkg:npm/shelljs@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/shelljs/-/shelljs-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/shelljs/-/shelljs-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66a1ab0206aaa9933b2c64733632e7c397a57af59be4cf0b1280cc69dc485b73966dcbfbdb030c80a77038aa5de45ab17bc721a0b0fc1cdde24a3dd3521fe089"
        }
      ],
      "purl": "pkg:npm/underscore@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5baf52c09dffa41764c30a4dc423a69491e5b090b3036c49e03c96a177b3763044b5e06afd1dde5fa09a53b48cee64e375253589223b506e7b7e5d10a8d3b837"
        }
      ],
      "purl": "pkg:npm/jshint@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jshint/-/jshint-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jshint/-/jshint-0.9.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jshint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jshint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fae5751a815dd5099efc4be3d11de45d7dac66f2c53cf2afdc53c113e437dd7c7e304d46e22dd5d71f6aebc8fa9c77d95ac97be1f7427d7e122318dbb8ab4a5c"
        }
      ],
      "purl": "pkg:npm/minimatch@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.0.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98cddcda2a3c965206bbfe96b8c84b97942ef4596de62a3c129baa93e8886cac325300d023a15d7020f18c0861c58aa08b4535ec6f3d721bbf55ad606ca8496f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-1.0.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul",
      "version": "0.1.42",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1d525a9fbe6471a7e3ba13cce008e6505bb8a92085922ac537a8c85083930fccfdbbbdcf69a69203511423ce4dff678d0e5824e404d1d028182b014a62bfb26"
        }
      ],
      "purl": "pkg:npm/istanbul@0.1.42",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/istanbul/-/istanbul-0.1.42.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul@0.1.42",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/istanbul/-/istanbul-0.1.42.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/istanbul"
        },
        {
          "name": "cdx:npm:bin",
          "value": "istanbul"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is no longer maintained, try this instead:\n  npm i nyc\nVisit https://istanbul.js.org/integrations for other alternatives."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6857500b65859d304b283926b355ee09dbfd138a6d593cabf3db1be6a718e912b064179a3b5505a2bd5afc57194084e75eb23bca1ca9bada5d2034478be3ed8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/abbrev@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/abbrev/-/abbrev-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/abbrev/-/abbrev-1.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "380b4cea67b11ad78d29d536f707147d15be56e06bf78037871f61f72cc19cf69001b2a85b539177af1733808200ea5d2f9c2534580edbd86c6354cabf6bc02b"
        }
      ],
      "purl": "pkg:npm/async@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/async/-/async-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/async/-/async-0.2.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "0.0.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0172830378bf962a6b04dd8cddb7dd5cac956cfde6ed8800ed134b8276596a9e632cdff203fc2c4589194fff78e85347a1af68a369184ee79417ba63606bcd0e"
        }
      ],
      "purl": "pkg:npm/escodegen@0.0.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escodegen/-/escodegen-0.0.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@0.0.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escodegen/-/escodegen-0.0.24.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/escodegen, /app/node_modules/.bin/esgenerate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "escodegen, esgenerate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09cf523aeebae65c004d94f6b735607a2665aa99cdeb02acd81bd6ac9e67412cc66a2be32f5301631cb2f79d5a9e676c80c64d4ecb0f5c1449abc5b9be044d71"
        }
      ],
      "purl": "pkg:npm/esprima@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esparse, /app/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db50df042b052466f71d9af4bc4047d56935b4649b6f303c23fc6d492a32fe946dba91efd0e80198e6dc3465ccdde73afe93974ce394618f7fe5b7e5bb3cf4b3"
        }
      ],
      "purl": "pkg:npm/estraverse@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/estraverse/-/estraverse-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/estraverse/-/estraverse-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.26",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3e01b2b02bad3608ac9a7cd02e7e628cdbf9f0f3d7282a07aca69cbfba137c3ab670383ee442c1e9ac22719659988c27ef256ff600cc4be7fc06516c9782cfe"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.26",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.26.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.26",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.26.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41cdca538847bf4c3e560cdd7d74b3cbe6596531a8e41ba2ac6fc21e255be656f458a8be9d7943258d08c689ec9db39c06ddf537d52c7502f30f2240952f1c75"
        }
      ],
      "purl": "pkg:npm/amdefine@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fileset",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af7a5acc9fe0e2fc7783bd14e2059d50677e8162351293336d45a038827faed41c67211e6a1400e9b0203b52971809fa0bda45125ea62761589943f5b2d9f576"
        }
      ],
      "purl": "pkg:npm/fileset@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fileset/-/fileset-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fileset@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fileset/-/fileset-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "1.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "948e8cbac313a7d70fd6723671b48ac40596ea64e4b81a860f744b1da4c17d4683085b7227544c704ba75e21ab96c10e6ee390d68aeecda2348bc3ea11bbb5fd"
        }
      ],
      "purl": "pkg:npm/handlebars@1.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/handlebars/-/handlebars-1.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@1.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/handlebars/-/handlebars-1.0.12.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/handlebars"
        },
        {
          "name": "cdx:npm:bin",
          "value": "handlebars"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c2c7475743356d4828363a063f6cef618ccf5c5785d8c74f5354afacdfe1619234fa2e8bec2defa93ccce959ffbac972bf8548b3b36814a13c378c733455a4d"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.3.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f62d65b27717f9f81b696f44bf1a0ff22859988e75fd8ed43899d37d611abbdc184ddb51215340efc37c180cba9ddd3a2819426508a7f719fca38f2fd14dc58"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uglify-js/-/uglify-js-2.3.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0e0aad037bf87d671b1eab3087f0ac3f16295fe6917fbcc23af811fb2eed235f3da9a980a34c0411a254b14488be031fa80828e5c6824c3f4610e1796b40d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7cbd79bb059da31354f1af187f84eef81d3b9865011ba3c79da11700360759e3e3c257ea5b8ddff176e9a69268e30bb2d4e448cfce5bbccc4abfa315b296728"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nopt@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nopt/-/nopt-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/nopt/-/nopt-2.1.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0269535a20b37fce4da216dd7efaa6017c577db1151222a68977c03080505ca7d09529a4f9a98c02711f63d512a0aebbd9ebf7e6320377240703edfa46d7d30c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve/-/resolve-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/resolve/-/resolve-0.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7cdb0f5edfadbc635b02238d4f6f365be506da72cb7662dfe01389adaab357bfae529b035b01c42f4b85647a1b6a99c94070e877ead8108b0860e9f2af9320c"
        }
      ],
      "purl": "pkg:npm/which@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which/-/which-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which/-/which-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/diff@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eyes@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vows@0.7.0",
      "dependsOn": [
        "pkg:npm/diff@1.0.5",
        "pkg:npm/eyes@0.1.8"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.12",
      "dependsOn": [
        "pkg:npm/lru-cache@2.3.0",
        "pkg:npm/sigmund@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.3",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.0",
        "pkg:npm/inherits@2.0.0",
        "pkg:npm/minimatch@0.2.12"
      ]
    },
    {
      "ref": "pkg:npm/cli@0.4.3",
      "dependsOn": [
        "pkg:npm/glob@3.2.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.0-dev",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/peakle@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shelljs@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jshint@1.1.0",
      "dependsOn": [
        "pkg:npm/cli@0.4.3",
        "pkg:npm/esprima@4.0.0-dev",
        "pkg:npm/minimatch@0.2.12",
        "pkg:npm/peakle@0.0.1",
        "pkg:npm/shelljs@0.1.4",
        "pkg:npm/underscore@1.4.4"
      ]
    },
    {
      "ref": "pkg:npm/yui-lint@0.1.3",
      "dependsOn": [
        "pkg:npm/jshint@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.0.5",
      "dependsOn": [
        "pkg:npm/lru-cache@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/jshint@0.9.1",
      "dependsOn": [
        "pkg:npm/cli@0.4.3",
        "pkg:npm/minimatch@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.26",
      "dependsOn": [
        "pkg:npm/amdefine@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/escodegen@0.0.24",
      "dependsOn": [
        "pkg:npm/esprima@1.0.3",
        "pkg:npm/estraverse@0.0.4",
        "pkg:npm/source-map@0.1.26"
      ]
    },
    {
      "ref": "pkg:npm/fileset@0.1.5",
      "dependsOn": [
        "pkg:npm/glob@3.2.3",
        "pkg:npm/minimatch@0.2.12"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.3.7",
      "dependsOn": [
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.3.6",
      "dependsOn": [
        "pkg:npm/async@0.2.9",
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/source-map@0.1.26"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@1.0.12",
      "dependsOn": [
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/uglify-js@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@2.1.2",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/resolve@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul@0.1.42",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.4",
        "pkg:npm/async@0.2.9",
        "pkg:npm/escodegen@0.0.24",
        "pkg:npm/esprima@1.0.3",
        "pkg:npm/fileset@0.1.5",
        "pkg:npm/handlebars@1.0.12",
        "pkg:npm/mkdirp@0.3.5",
        "pkg:npm/nopt@2.1.2",
        "pkg:npm/resolve@0.4.0",
        "pkg:npm/which@1.0.5",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cssproc@0.0.7",
      "dependsOn": [
        "pkg:npm/istanbul@0.1.42",
        "pkg:npm/jshint@0.9.1",
        "pkg:npm/vows@0.7.0",
        "pkg:npm/yui-lint@0.1.3"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/cssproc@0.0.7"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-24T05:06:41Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'cssproc' with version '0.0.7'."
    }
  ]
}