{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:854e1b4a-8405-46c0-86f9-308b0b1d8a41",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-24T06:42:38Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "fdir",
      "group": "",
      "version": "5.2.0",
      "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s",
      "purl": "pkg:npm/fdir@5.2.0",
      "bom-ref": "pkg:npm/fdir@5.2.0",
      "author": "thecodrr <thecodrr@protonmail.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test, test:coverage, bench, bench:glob, bench:fdir, release"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thecodrr/fdir#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/thecodrr/fdir.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@arrows\\n@nodelib\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "yarn.lock"
      }
    ]
  },
  "components": [
    {
      "group": "@arrows",
      "name": "array",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93377dcfade5aaabf2aa443890e346313a2bde397fcdfe07ed1bd7e21a321ba985ec88b4d70c752521e90d4e7385020cf9ba98ee6e2e69ea9cf9700380a64b98"
        }
      ],
      "purl": "pkg:npm/%40arrows/array@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/@arrows/array@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@arrows",
      "name": "composition",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5f875c87c2bc77da5ba77620774a567f570b92b4f07841a90fb122eb189147eab097bddaddd3ad22bc067bff6be5a8f9c48c190f4515ce706d583aed7da7619"
        }
      ],
      "purl": "pkg:npm/%40arrows/composition@1.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/@arrows/composition@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@arrows",
      "name": "dispatch",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bff1f0beb1689e2b5864cd8f981940942a95ab1ae4208a2212ecb96d0827d0175fbe52f4a28481cdc3f34ccaedcd8f1e624b4fc9870783c7cb6d2832c9b5c4ab"
        }
      ],
      "purl": "pkg:npm/%40arrows/dispatch@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/@arrows/dispatch@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@arrows",
      "name": "error",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "caf922bf56b2e19dfe67aa10b1491e76c426e5a15dc8fa6405442cf2f7a36b353f46600d001c7a6cc31c04f3c7238696e3754f4265c57c1cebff8144c7059310"
        }
      ],
      "purl": "pkg:npm/%40arrows/error@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@arrows/error@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@arrows",
      "name": "multimethod",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1231c3dd7b86015e06dbcae6ee6bbc93bcd0261fc43a2ce1d74e3fa7d8b6a1f19c9cbe6680a38d147fc1aba1f74898ccf960c094a711f560693616802829c7da"
        }
      ],
      "purl": "pkg:npm/%40arrows/multimethod@1.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/@arrows/multimethod@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.scandir",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7869b06109f7831a38afb8dd42792bacde9b638efc0b73fe6bfcbbd8826e905f0b8c1e991de07773e12169c8f7b187929945c696703aeff3e66ccf425702fb0f"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d0045aee4764c0c287af04477f356328000b4d1b34d181daea9d809cedd8737e836fa8fccbcaa944427cd9de456736b4a9db98b2c44d34ff78767ea180180ac"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.walk",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d55f57398e2b0d6d2b7a1cdbadca809879f3f1eed22af5f6ee087c1add96801d3ea5dcdd88b57cde9ef69193d4fa3bcc6d2d6a53999ab8fda23af3bcae19aead"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.walk@1.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "3.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b47abaa9d6d3f54d4845219fd7808bd2952550b92cbd8f4e67ee5e12097537bb7e380ded1af369c490b3b8a425b0d8025706c0b3aef42f5bdc5508bc8fd1e39c"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "all-files-in-tree",
      "version": "1.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0a20c77fc9637484bbba42e07fcb1f9e892cc01"
        }
      ],
      "purl": "pkg:npm/all-files-in-tree@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/all-files-in-tree@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "all-files-in-tree"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "701869adee266be5344f5a0ce5f5e0ec3cb5270ef3cf0bfb96dfc6a02a6bfa10d02686272953cb2f8742bd210532642eace42f4abc13ed22ff0c0961048f7b45"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5aa5e3df5ccd54392ab0d28f48885028bd5cfd3394b50e0fb84eb0f07cc7b043aa7fae632e79beed5998d0d6bc782e8cb502b060828a86a5faaa748e2ba2776"
        }
      ],
      "purl": "pkg:npm/ansi-regex@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "benchmark",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09f3de31c916425d498cc2ee565a0ebf3c2a5629"
        }
      ],
      "purl": "pkg:npm/benchmark@2.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/benchmark@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "benny",
      "version": "3.6.14",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63d3b8e290f85a87acf8ae8e42d21587d16f821b403ebfc276771d62773ea756e942e45a854e066ed0861b0550c3101b811d82069549b5fefd716bf578f70b59"
        }
      ],
      "purl": "pkg:npm/benny@3.6.14",
      "type": "library",
      "bom-ref": "pkg:npm/benny@3.6.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "benny"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 16
          },
          {
            "location": "benchmarks/fdir-benchmark.js",
            "line": 1
          },
          {
            "location": "benchmarks/glob-benchmark.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fcba6f8bd51cccdd60d2cef866ea0233d727d36c1b7a61395c10a02fb26a82659170e3acfadba9558fd8f5c843d6df71f91fe94142964c3f593c97eefc1dad0"
        }
      ],
      "purl": "pkg:npm/braces@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b35dac376479facc3e94747d41d0d0f5238ffcb5"
        }
      ],
      "purl": "pkg:npm/cli-cursor@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b004b444210ecbbd8141d16c91bf086ae4de6a3e173a3cc8c3e9b620805948e58c83825fb4bf1ab95476cc385a8b83b85f5b39aef13e59d50a1f8664c8848b4"
        }
      ],
      "purl": "pkg:npm/emoji-regex@7.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ensure-posix-path",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "556534ff35f355b789357bcc13fe4498bb848f64dabafa1a4f3e9a1582b567dd89081943959dc6bb4b6e191e369295b5ef9e32c13b3e401d20e533f4a23f596b"
        }
      ],
      "purl": "pkg:npm/ensure-posix-path@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ensure-posix-path@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1411ae7c4032dab8335fa5bad7e7943d8eb1874e1c3664c74e932e46975083b557890cf56b1b8271c7537c8f0da091669f7f9514b97d4a25dfbdcc67b607e64"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-glob",
      "version": "3.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50357cda8e2e432963ce7c70331c9544981966ddcee7010d6288e3cdb68610666078ec642c57fe578727503fa4af36f617bd84d7c4616a690c67b01d7a0805ec"
        }
      ],
      "purl": "pkg:npm/fast-glob@3.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/fast-glob@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "fast-glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/glob-benchmark.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastq",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48c219a1974b87f7e0a1f8afbc8926927517c8f9efc511370e1b59e4c7b732bb24e60c8f2f8d85d31af9d537515ec901c477cca7ed3b6dc6337ec604b12400f5"
        }
      ],
      "purl": "pkg:npm/fastq@1.8.0",
      "type": "library",
      "bom-ref": "pkg:npm/fastq@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fdir",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1948c8fbc202dfa2ebf674408d70c5fdc3856033444d320ca02c3912b9f47df735cfa91502eb12db63922124969965549b5aabe7553443761805478e7043d81"
        }
      ],
      "purl": "pkg:npm/fdir@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/fdir@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fdir",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dceac4768e4fd28e920afcb41b84cd5f1f7b0f8fdfdc4fa828c174abd3265862312432d28d069b4499e5040a4bb68a5da1a675d3c5a33e31d033b9e21581d81a"
        }
      ],
      "purl": "pkg:npm/fdir@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fdir@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fdir",
      "version": "3.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0726bae24056f6eb380a65f84fb3f7255f93058d1c5c1dc9866c98050e825c478f6ade450fbd9fede68ab7be658d23f647c11dc03e2dc447acb4436c1ff0f426"
        }
      ],
      "purl": "pkg:npm/fdir@3.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/fdir@3.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fdir",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0e9288673e0e2750891deb0db68866c50fb73b52f5675c1ddaeff18770f4ac5c35069ba271a75d9b188e4ed20af462e84387997fbc31317473a7ad6fe3f44a9"
        }
      ],
      "purl": "pkg:npm/fdir@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fdir@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fdir",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72d7aac16300e379449a0c0e8391d276f855143dfdbc78d00e166444c94a99ea0d3ed492814c359d4ca9c9d898daea4c74688114166f3410db9e8061d320b369"
        }
      ],
      "purl": "pkg:npm/fdir@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fdir@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ea3d17e74c5260b62dc6f805b56f9ca2714cf8c29be451a5ee200ee1abce42fb984565fdd8d84aed8e750d8f6b7d36378a2a91283d8abea368b589d94495a5"
        }
      ],
      "purl": "pkg:npm/fill-range@7.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca1950800ea69ce25428eb11505b2025d402be42a1733f2d9591b91c141f45e619cb8e8ec0b718f9989ad26b5d1ec3a8f72fe13fe0b130dd1353d431a0eb46e2"
        }
      ],
      "purl": "pkg:npm/fs-extra@8.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-readdir-recursive",
      "version": "1.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18d6a75e556bda97f4dbeb0f378d1737c1c6f9e3da35cbccd2ae6664177aebc39bc1bd320f91a251b64e160c27f2418c63a23799dc8327389e532dcf4d8c9344"
        }
      ],
      "purl": "pkg:npm/fs-readdir-recursive@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs-readdir-recursive@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "fs-readdir-recursive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-all-files",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "552a69a459f259274858bbb9ce55e4215a7f41319857c8a59da0117fc044481ac5d0275003aa1de22b3292a7623bb744a850e78478291f2af58576616c13f260"
        }
      ],
      "purl": "pkg:npm/get-all-files@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-all-files@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "get-all-files"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 17
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16723e5463a99e5187599c6d84f191f90851efc7ee88ad2c34b90742ff9b2fd7d08b9ee534d76ab886e76bf5ab7d13aba25abc18ae4493a062330a8bfefa1161"
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f06b1c3267bd8b93bbd920db4d36bcb05f466e2f24adadd0ed69b79f64a018e59189855b607739e5b917acc4d98f8ad1344803be3b6eac5931de292236c0c04"
        }
      ],
      "purl": "pkg:npm/glob@7.1.6",
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/glob-benchmark.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globalyzer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e34a0d4ccf547c6e9a066b8ac64fe08879f99d0f11573fd24b822beb38333aff7fa82de4299f6fe1eb464dc25b125fcdc95407ec5194eddf97d5e82be7b31dd9"
        }
      ],
      "purl": "pkg:npm/globalyzer@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/globalyzer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globrex",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b872606f000cc0d15fe662ecb7b2162cd835e31d4291eaa09496ff2b77688b8770eaad88bc002633f63cd647afcbcdf03fe4acb7e9eeb454d838683777596cc6"
        }
      ],
      "purl": "pkg:npm/globrex@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/globrex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7d151019b83c4771d5d441ecc14aec17a37a3bc2bc1ae89db2e386dfac1ee1988fc3c7b3b33fe59fabb79970e79d6f67bc9f4c28f856ecb2de6489cad0d645"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e46d2d2ad05314898ea839cb076846e81a76a9c28415dba8e2d66ef4c4ff1fa350bff821872df4a39e6e7da7f127f2dd1fbf4b2ecd8a7eb9fce532cac80ec152"
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json2csv",
      "version": "4.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6310616382e69fc22f559dfa9ea839a26c6778bcbd265a2b92a5b58ff10309eaaf9a2f82438b8cfb0b2f5e5708aaf1837b020f5cc0bf3bfa05f035fd107e5aa0"
        }
      ],
      "purl": "pkg:npm/json2csv@4.5.4",
      "type": "library",
      "bom-ref": "pkg:npm/json2csv@4.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8771aae0799b64076b76640fca058f9c10e33ecb"
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonparse",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f4dae4a91fac315f71062f8521cc239f1366280"
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "klaw-sync",
      "version": "6.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c87ae552cdd082b3a4c33d3a88f30d58adedf8b12abb024678077b1f3816c8d82815481e03bb868b4228c5536fa5840142c2df7ee361de97a950348bfa027b5"
        }
      ],
      "purl": "pkg:npm/klaw-sync@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/klaw-sync@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "klaw-sync"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 9
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kleur",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "793233955392511f89c5d0c57a911870132d67d42a75e7feae7cd675166e31b3b2c2ee6d3b6c3637baea8e800d67993dbf2c212fa06bd55463508813431e04f3"
        }
      ],
      "purl": "pkg:npm/kleur@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/kleur@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.get",
      "version": "4.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d177f652fa31e939b4438d5341499dfa3825e99"
        }
      ],
      "purl": "pkg:npm/lodash.get@4.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/lodash.get@4.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-update",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20b29ef3c35e32de20983be4fde6fad7953f2159fb2bd2961a4a186dd6ad43af59eb99e3d59ce333a7c75df72cd1481ef9ef841a7316ec36384fdca4a3cbd616"
        }
      ],
      "purl": "pkg:npm/log-update@3.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/log-update@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "matcher-collection",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75a13ada74b6650b0383dada3342256732e6236bbeed96a95c1c1da1e05428060444f0c321cd2a36a03c134469d83fa0b29291ec180814fe7619eba36865d679"
        }
      ],
      "purl": "pkg:npm/matcher-collection@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/matcher-collection@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge2",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da3e0301d9413a4892648b1a5e4e264c4dec452d36c811c0b5fcb5dbbc515776d0505a979231c21cb5ba49cbfb0f03516c858d1c7f33a67cfdccc68a5c876f63"
        }
      ],
      "purl": "pkg:npm/merge2@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/merge2@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbb1691d26cc50ca323db6144b33ba3da67a17246740ea47b8ac1ba351be2a7724f795d553840088a7461278f9c30a12ecf94e82d857ff4f6ee62149f9a61fe5"
        }
      ],
      "purl": "pkg:npm/micromatch@4.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8dff38bb1cf08ae88854a88e2e97d893b378e934b2f2e6d3a279a7798f6fae91cd027a74401b76071595f5d3b7fe3f81a1501bf9ae46e980cf5b73391ce74c59"
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mock-fs",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0399a6fd2a520f0c1cfe4952684bef28c19042d886890cbc51c0c077fbe954ed5f57ee336878eddfdc8a802484ac5cefdb3631648531f5477fef26de1c17fc16"
        }
      ],
      "purl": "pkg:npm/mock-fs@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/mock-fs@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "067428230fd67443b2794b22bba528b6867962d4"
        }
      ],
      "purl": "pkg:npm/onetime@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/onetime@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab433ff5e647ce6af402e957c8fc0d7d98edc19fd105995b3772b7084ad5ae4e744f6012608ec1c9ed04bde90563720fd4db760c7bb4adef95d991c8a4c92e5a"
        }
      ],
      "purl": "pkg:npm/picomatch@2.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "picomatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "src/builder/index.js",
            "line": 7
          }
        ]
      }
    },
    {
      "group": "",
      "name": "platform",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4eebc74bc00e219340944efb5940e2478af2495fd5329b7231f71f7a8320b383fc6a969933726b9dbcc18a2c4a52ff9747a8be057ad087c5809e36923c53bae5"
        }
      ],
      "purl": "pkg:npm/platform@1.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/platform@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "1.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3b3e8c83bff208d4e6e042e9c26c1f4f74b99470165c9d639cc4387b3b437f5300c4b07caa916f90876f235be995b82771ee02c1d01a2d608d58eae23d8b27b"
        }
      ],
      "purl": "pkg:npm/prettier@1.19.1",
      "type": "library",
      "bom-ref": "pkg:npm/prettier@1.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recur-readdir",
      "version": "0.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4edf4790b18d46a869be6e6395784c11ae535219c29a7cb0cff803906a050a928907d40463ecb4b02762dc6d1eacadce5883b30ff4b10a7153da07a3d8957ab8"
        }
      ],
      "purl": "pkg:npm/recur-readdir@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/recur-readdir@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "recur-readdir"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recursive-files",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bdc44e4222987eee1ef68a50a568b83c82eaae53"
        }
      ],
      "purl": "pkg:npm/recursive-files@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/recursive-files@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "recursive-files"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recursive-fs",
      "version": "2.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e77762bb98b03e76322d7ab3fd3b7986e540e2e2e5d4edc6920935d7c2109ed2e6ff1d0e055cc9c6abd294567f8201b8f30892872d0bc453a8627320a30d01"
        }
      ],
      "purl": "pkg:npm/recursive-fs@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/recursive-fs@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "recursive-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 15
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recursive-readdir",
      "version": "2.2.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d109c5bd4a3ecdb99c1ad97bc7f5ca3c34f7975018593fb091289b54f9c4ba3d6f45a42205a08e626f4353d59adb36e3e8472d3297209a50bf068a1e0b4b216"
        }
      ],
      "purl": "pkg:npm/recursive-readdir@2.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/recursive-readdir@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "recursive-readdir"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 12
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f7ee287f82fd326d4fd162923d62129eee0dfaf"
        }
      ],
      "purl": "pkg:npm/restore-cursor@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reusify",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53d9c7f3c6b77dcfde902175974fd43f5228b22b888f24e1ee106f5d530762055c7c6bedf3ded782e8f650e2c3788e411b69bbfeec3268b553e9f6ed0b04f2cf"
        }
      ],
      "purl": "pkg:npm/reusify@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/reusify@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rrdir",
      "version": "6.1.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5602f4c4d38d6bdcad6a48839ea12f220a19bc646a08253ec087644b1c0ded6ab2a5ff143ab113c9f00187ca8714e047f73ad945b21f4bd2c864cb5e6bfa5252"
        }
      ],
      "purl": "pkg:npm/rrdir@6.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/rrdir@6.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "rrdir"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 13
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-parallel",
      "version": "1.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c4aa74914c3c3f4dcdc55dfe3dcde748eb7f19f689f0528b413225052a6acedac7452886d76a65c6437031778aa0a61c4a078930fea3f5c39913c677d4d41f5"
        }
      ],
      "purl": "pkg:npm/run-parallel@1.1.9",
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stats-median",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "218b2178b83a75ab03df34ffc3dfbc22af6d70842aaaef75648a493a7204336e42dd7fe0e1397c9a15f05b6650a5baec2484abf7ec22cc4620b226cde7f6f7d9"
        }
      ],
      "purl": "pkg:npm/stats-median@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/stats-median@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bda7dcbfa2a3559292833d3aa0cfc7e860c1ac0b73f2f76141a9068c522f36b1c0eb2dc7085d422272f2f902eaf1d4c93d0d5bf8a0d4a8315cb647515b8e1ed7"
        }
      ],
      "purl": "pkg:npm/string-width@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ee46cd6029b06ab0c288665adf7f096e83c30791c9e98ece553e62f53c087e980df45340d3a2d7c3674776514b17a4f98f98c309e96efbdcc680dc9fa56e258"
        }
      ],
      "purl": "pkg:npm/strip-ansi@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "systeminformation",
      "version": "5.6.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f6b6f5b547eaa3344a001a087bdf81062e0a9b0cc8218ec1d1696a37eac9000ba24cd6dc35a62b5c1b3fd112dfaa4884525db1383ca102a2385a4ab051ac49b"
        }
      ],
      "purl": "pkg:npm/systeminformation@5.6.4",
      "type": "library",
      "bom-ref": "pkg:npm/systeminformation@5.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "systeminformation"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/sysinfo.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-glob",
      "version": "0.2.9",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83fe79b2c44f5234a187ec647f1f543c35ea85c90712c1ebe1577dcd7e79a1274665cfcc0f49b7b1f7ab3a4c16b69f7c6effa47157c41ed449801549cde96bce"
        }
      ],
      "purl": "pkg:npm/tiny-glob@0.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/tiny-glob@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "tiny-glob,tiny-glob/sync"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/glob-benchmark.js",
            "line": 4
          },
          {
            "location": "benchmarks/glob-benchmark.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac125e2390970259b2d6957eeb5ed607d27add4e9771acc71c5d9fd9d6c98b1e17ce9505d114b765b8f414620e080bdae4ffddfc604e61a002435c3ed1acd492"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walk-sync",
      "version": "2.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "742664af17c78cf9fbb48bdd62b5f7b8c0ff4746de56b1e903c951390e705ab97ca6c26047ac700a4c2a4c57acd1d36e8db4b6a3f213a6f49880816c2ec7f5dc"
        }
      ],
      "purl": "pkg:npm/walk-sync@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/walk-sync@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "walk-sync"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ],
        "occurrences": [
          {
            "location": "benchmarks/benchmark.js",
            "line": 14
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "402d7f88dff6fd13d52798d82bc046b6d8f9cfcdcb9922a6bdbbeb5cf3422d94846f7d8a2950c90e5fcc3add8dd35a94d87fc593311af4f2ada3506a0e3b5ded"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@5.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "yarn.lock"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "yarn.lock"
              }
            ],
            "concludedValue": "yarn.lock"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@arrows/array@1.4.0",
      "dependsOn": [
        "pkg:npm/@arrows/composition@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@arrows/composition@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@arrows/dispatch@1.0.3",
      "dependsOn": [
        "pkg:npm/@arrows/composition@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/@arrows/error@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@arrows/multimethod@1.1.7",
      "dependsOn": [
        "pkg:npm/@arrows/array@1.4.0",
        "pkg:npm/@arrows/composition@1.2.2",
        "pkg:npm/@arrows/error@1.0.2",
        "pkg:npm/fast-deep-equal@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.scandir@2.1.3",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.3",
        "pkg:npm/run-parallel@1.1.9"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.stat@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@nodelib/fs.walk@1.2.4",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.scandir@2.1.3",
        "pkg:npm/fastq@1.8.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/minimatch@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/all-files-in-tree@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/benchmark@2.1.4",
      "dependsOn": [
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/platform@1.3.5"
      ]
    },
    {
      "ref": "pkg:npm/benny@3.6.14",
      "dependsOn": [
        "pkg:npm/@arrows/composition@1.2.2",
        "pkg:npm/@arrows/dispatch@1.0.3",
        "pkg:npm/@arrows/multimethod@1.1.7",
        "pkg:npm/benchmark@2.1.4",
        "pkg:npm/fs-extra@8.1.0",
        "pkg:npm/json2csv@4.5.4",
        "pkg:npm/kleur@3.0.3",
        "pkg:npm/log-update@3.4.0",
        "pkg:npm/prettier@1.19.1",
        "pkg:npm/stats-median@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.2",
      "dependsOn": [
        "pkg:npm/fill-range@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cli-cursor@2.1.0",
      "dependsOn": [
        "pkg:npm/restore-cursor@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@7.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ensure-posix-path@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-glob@3.2.2",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.3",
        "pkg:npm/@nodelib/fs.walk@1.2.4",
        "pkg:npm/glob-parent@5.1.1",
        "pkg:npm/merge2@1.3.0",
        "pkg:npm/micromatch@4.0.2",
        "pkg:npm/picomatch@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/fastq@1.8.0",
      "dependsOn": [
        "pkg:npm/reusify@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/fdir@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@3.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-range@7.0.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@8.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/universalify@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/fs-readdir-recursive@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-all-files@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.1",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@7.1.6",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/globalyzer@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globrex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json2csv@4.5.4",
      "dependsOn": [
        "pkg:npm/commander@2.20.3",
        "pkg:npm/jsonparse@1.3.1",
        "pkg:npm/lodash.get@4.4.2"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@4.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/jsonparse@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/klaw-sync@6.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/kleur@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.get@4.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-update@3.4.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@3.2.0",
        "pkg:npm/cli-cursor@2.1.0",
        "pkg:npm/wrap-ansi@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/matcher-collection@2.0.1",
      "dependsOn": [
        "pkg:npm/@types/minimatch@3.0.3",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/merge2@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/micromatch@4.0.2",
      "dependsOn": [
        "pkg:npm/braces@3.0.2",
        "pkg:npm/picomatch@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/mock-fs@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/onetime@2.0.1",
      "dependsOn": [
        "pkg:npm/mimic-fn@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/platform@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier@1.19.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/recur-readdir@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/recursive-files@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/recursive-fs@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/recursive-readdir@2.2.2",
      "dependsOn": [
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/restore-cursor@2.0.0",
      "dependsOn": [
        "pkg:npm/onetime@2.0.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/reusify@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rrdir@6.1.3",
      "dependsOn": [
        "pkg:npm/picomatch@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/run-parallel@1.1.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stats-median@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string-width@3.1.0",
      "dependsOn": [
        "pkg:npm/emoji-regex@7.0.3",
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@5.2.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/systeminformation@5.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tiny-glob@0.2.9",
      "dependsOn": [
        "pkg:npm/globalyzer@0.1.0",
        "pkg:npm/globrex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/walk-sync@2.0.2",
      "dependsOn": [
        "pkg:npm/@types/minimatch@3.0.3",
        "pkg:npm/ensure-posix-path@1.1.1",
        "pkg:npm/matcher-collection@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@5.1.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/string-width@3.1.0",
        "pkg:npm/strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fdir@5.2.0",
      "dependsOn": [
        "pkg:npm/@arrows/array@1.4.0",
        "pkg:npm/@arrows/composition@1.2.2",
        "pkg:npm/@arrows/dispatch@1.0.3",
        "pkg:npm/@arrows/error@1.0.2",
        "pkg:npm/@arrows/multimethod@1.1.7",
        "pkg:npm/@nodelib/fs.scandir@2.1.3",
        "pkg:npm/@nodelib/fs.stat@2.0.3",
        "pkg:npm/@nodelib/fs.walk@1.2.4",
        "pkg:npm/@types/minimatch@3.0.3",
        "pkg:npm/all-files-in-tree@1.1.2",
        "pkg:npm/ansi-escapes@3.2.0",
        "pkg:npm/ansi-regex@4.1.0",
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/benchmark@2.1.4",
        "pkg:npm/benny@3.6.14",
        "pkg:npm/brace-expansion@1.1.11",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/cli-cursor@2.1.0",
        "pkg:npm/color-convert@1.9.3",
        "pkg:npm/color-name@1.1.3",
        "pkg:npm/commander@2.20.3",
        "pkg:npm/concat-map@0.0.1",
        "pkg:npm/emoji-regex@7.0.3",
        "pkg:npm/ensure-posix-path@1.1.1",
        "pkg:npm/fast-deep-equal@3.1.1",
        "pkg:npm/fast-glob@3.2.2",
        "pkg:npm/fastq@1.8.0",
        "pkg:npm/fdir@1.2.0",
        "pkg:npm/fdir@2.1.0",
        "pkg:npm/fdir@3.4.2",
        "pkg:npm/fdir@4.1.0",
        "pkg:npm/fdir@5.0.0",
        "pkg:npm/fill-range@7.0.1",
        "pkg:npm/fs-extra@8.1.0",
        "pkg:npm/fs-readdir-recursive@1.1.0",
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/get-all-files@2.0.0",
        "pkg:npm/glob-parent@5.1.1",
        "pkg:npm/glob@7.1.6",
        "pkg:npm/globalyzer@0.1.0",
        "pkg:npm/globrex@0.1.2",
        "pkg:npm/graceful-fs@4.2.3",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/is-extglob@2.1.1",
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/is-glob@4.0.1",
        "pkg:npm/is-number@7.0.0",
        "pkg:npm/json2csv@4.5.4",
        "pkg:npm/jsonfile@4.0.0",
        "pkg:npm/jsonparse@1.3.1",
        "pkg:npm/klaw-sync@6.0.0",
        "pkg:npm/kleur@3.0.3",
        "pkg:npm/lodash.get@4.4.2",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/log-update@3.4.0",
        "pkg:npm/matcher-collection@2.0.1",
        "pkg:npm/merge2@1.3.0",
        "pkg:npm/micromatch@4.0.2",
        "pkg:npm/mimic-fn@1.2.0",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/mock-fs@5.0.0",
        "pkg:npm/once@1.4.0",
        "pkg:npm/onetime@2.0.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/picomatch@2.2.2",
        "pkg:npm/platform@1.3.5",
        "pkg:npm/prettier@1.19.1",
        "pkg:npm/recur-readdir@0.0.1",
        "pkg:npm/recursive-files@1.0.2",
        "pkg:npm/recursive-fs@2.1.0",
        "pkg:npm/recursive-readdir@2.2.2",
        "pkg:npm/restore-cursor@2.0.0",
        "pkg:npm/reusify@1.0.4",
        "pkg:npm/rrdir@6.1.3",
        "pkg:npm/run-parallel@1.1.9",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/stats-median@1.0.1",
        "pkg:npm/string-width@3.1.0",
        "pkg:npm/strip-ansi@5.2.0",
        "pkg:npm/systeminformation@5.6.4",
        "pkg:npm/tiny-glob@0.2.9",
        "pkg:npm/to-regex-range@5.0.1",
        "pkg:npm/universalify@0.1.2",
        "pkg:npm/walk-sync@2.0.2",
        "pkg:npm/wrap-ansi@5.1.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/fdir@5.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-24T06:42:38Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'fdir' with version '5.2.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: yarn.lock."
    }
  ]
}