{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:7bc34d48-2cc9-41bc-a661-d8d2d999311a",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-24T14:19:31Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "hsluv",
      "group": "",
      "version": "1.0.1",
      "description": "Human-friendly HSL",
      "purl": "pkg:npm/hsluv@1.0.1",
      "bom-ref": "pkg:npm/hsluv@1.0.1",
      "author": "Alexei Boronine <alexei@boronine.com>",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "tmp",
          "version": "",
          "purl": "pkg:npm/tmp",
          "type": "application",
          "bom-ref": "pkg:npm/tmp"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.hsluv.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/hsluv/hsluv-javascript.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@esbuild"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json\\ntest/tmp/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "typescript",
      "version": "5.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cda582a33459e832c4580585ad50f3d47e85557cd449f4f2e4550c5ac42553c626e493fd78ee31913211385090be141feb5cfa3bf1baba0c374a0027bef9be1c"
        }
      ],
      "purl": "pkg:npm/typescript@5.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-5.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-5.1.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/tsc, /app/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4626d627531b09ade1d803463e890cf6504ca4a2763ae8735639bd325d8662f7f90dace454107560f3b790b02b6a879f4f109e5855924ef7c247ce73094968e"
        }
      ],
      "purl": "pkg:npm/esbuild@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild/-/esbuild-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild/-/esbuild-0.18.17.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esbuild"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esbuild"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c07b26246fdd9cbdce92901cc1b8280534cc1d58b8532a2edc5e667f9f19b6653220a7dc740ed344e6afffab42cc44f8037416d90d850be7859de314fa2c8ec6"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f67a7e61874d0de779f8982bd5375606ca3367ce54d4e6b7c56d1ced35aa1f4cb66868215ed66cb93f276116f338c725d1b5d95e33866e4b284ed54e956ad166"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3be15e581ffec726b468b836de11c433613785b7f06738eaba628c488a9c1db36f0daf9dcdad83d322eeca64414109c2df8096aec2545f21f6306e559cb77abb"
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-arm64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "33db89f55481d68962d8113f749b37cd5afd91c08106c13cf37a6b6a07b5356cfaa414befb5a0d9ffeeca0f352dfed431a3d05ae44af9c40f806696ed55004f6"
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-arm64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-arm64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c3adef89e5878824331fa779f4dbbf4314dac60979713ae1ac5889116f535384c67406cad65e84e0db725eafb7c45d0f587b9423aef5e9c678739776c7b64d2"
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-arm64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7234f319add094d7c445ad3ea6dca4cb1b3903a144510405d0cba29585d8046741c43defc4970a9f30e584309ad550090a603179dea662103629a2486ed88db9"
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-arm64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0ec44bd1f1ded5ecac3c42acf159cedb15f9d69c675a141badd5d45462dbbe10845779f05cfde22c8948928675b484cdc5990e597f6eecb83b87b0a819e50ac"
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9ddcbc3ac24c2048b0b67c8bd72a830d19569e63ca9d374202deb7ee571269f3d0917c0ddedd5a9689f1837ee6a43e6a7dd3e662ae64dfc9ed67e27723bf696"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73dc37b44eea0370985a34fe33704c6f032dfb42583a9def08c2a0541ac29759f08c094e318cc4a3e806ed0699f40b6a6458f931b51cf3ce70b81066bba6800d"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ia32",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d434bd17debaa67e693e7a97633d7a750a96201d1d9837c041977a8d24a9893f5e5f53732a1d3b27a54a4770285d75c493a0aa64ca238950d2662d5296629576"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ia32@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ia32@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-loong64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12f2ecc4293a645d1fa4207ac3a78e23615cf0a5b937ab07948a2f35ef2e38539b2f63be32bd1b7e53c7c87c0b4faaf0320f6befb58e0166f616a090ad59f016"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-loong64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-loong64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-mips64el",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b46c8747039a7a97e970a93137e8d016e611edc36b4d4661e5181ca0642d7840e6ec0376c3e02eac5cb263be70c88d22a15b5ff44b7783cbe4265ffb9958461"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-mips64el@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-mips64el@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ppc64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "040022949d0ce4edae3311d81a314a9f89c9285e9f34274fd44d28e6de5fbcc618cde22acb625d00ff3c033e4b1edf6a06851ae2d0da4697d6b76d5ea79fd6a9"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ppc64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ppc64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-riscv64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a1fc75b630f9c2ddbf01a9148899effd66169bdfa3cf1fedf36a6e69a86447e2913ee314eb54bc76f97746a7a7d54b72f6c7e0ebb0872c6cc95e7b1f1f6c4ea"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-riscv64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-riscv64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-s390x",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ffdf88c0977ba5dcf35c2b7a5f23435294100d76e4f650ee6467b14268adf75c5bf77210e12022d8f3024958886243e60d750f5dc6a41cb518366efacc95882"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-s390x@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-s390x@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40ce74bc9ff2fbc23ad2a126171328c48c7875ed37a46a361f0c5d05e15de27321dfae17e9320167a550e544263db4165155875b0b39326257947017bc9126a5"
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe31a585647b4a3f493d91f35f2c8c67544532434f8c2e902006a7d2c0ceb48a364d8937b599f9503ae41345e0b13402c564d339c30f7fda7a461da15ed9794d"
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad211e61a1a0c8619fe2a64cd8da2732130e3ffe441e9e2ef5e845881ae0eecb47e8160412396455112e0c4710d0b7c8979dce5cbc4d6dfb888fb9abe66dbd4c"
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "sunos-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63b6416e42ea952827e3ece8b78294358b2dd1b1683baf2d46023a998d8520cf9bed96f2355b4d6c33f9cbcaa5bb8fe49d967bddf8090e55c80fea21639cede6"
        }
      ],
      "purl": "pkg:npm/%40esbuild/sunos-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/sunos-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-arm64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f03e64c9b0441c6d9936ea862973873ff0fbd3637279fd02bc8ccd7d0d5944b00078d4cdfd696a2f5a81ed366efcb1dea2a7aa6b8a5c5e1e8b0f0035ed10917"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-arm64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-arm64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-ia32",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ff5da3ed3ca962d8c856fb7090b9ea3a362dc0be0822ea13ff62f82411ed5a49ac70f8078ef0c163abc0e581f4ddf48cf8622877402648e982cca3271c9cf46"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-ia32@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-ia32@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-x64",
      "version": "0.18.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c611bf1fd81480dc25bbae2255babba0eb90022ee400ccaab4492aa46366f6c871c7d0ccc37db2f22881b31f0388fe090773133f95eb925ba0f9c3f2cc362b4"
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-x64@0.18.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.18.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-x64@0.18.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.18.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hsluv",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9086aa51ae1af5710472c2d84218983a52bf8acdb95e0c2ae42534411e6fabac3ea13df99d11626b046cf2f8f760f64bb4398c6e4903e56cc61037459d3bd95a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hsluv@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/hsluv@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/tmp/package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "node_modules/hsluv"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../../assets/hsluv-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/tmp/package-lock.json"
              }
            ],
            "concludedValue": "test/tmp/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/typescript@5.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-arm64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-arm64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ia32@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-loong64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-mips64el@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ppc64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-riscv64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-s390x@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/sunos-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-arm64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-ia32@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-x64@0.18.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild@0.18.17",
      "dependsOn": [
        "pkg:npm/@esbuild/android-arm64@0.18.17",
        "pkg:npm/@esbuild/android-arm@0.18.17",
        "pkg:npm/@esbuild/android-x64@0.18.17",
        "pkg:npm/@esbuild/darwin-arm64@0.18.17",
        "pkg:npm/@esbuild/darwin-x64@0.18.17",
        "pkg:npm/@esbuild/freebsd-arm64@0.18.17",
        "pkg:npm/@esbuild/freebsd-x64@0.18.17",
        "pkg:npm/@esbuild/linux-arm64@0.18.17",
        "pkg:npm/@esbuild/linux-arm@0.18.17",
        "pkg:npm/@esbuild/linux-ia32@0.18.17",
        "pkg:npm/@esbuild/linux-loong64@0.18.17",
        "pkg:npm/@esbuild/linux-mips64el@0.18.17",
        "pkg:npm/@esbuild/linux-ppc64@0.18.17",
        "pkg:npm/@esbuild/linux-riscv64@0.18.17",
        "pkg:npm/@esbuild/linux-s390x@0.18.17",
        "pkg:npm/@esbuild/linux-x64@0.18.17",
        "pkg:npm/@esbuild/netbsd-x64@0.18.17",
        "pkg:npm/@esbuild/openbsd-x64@0.18.17",
        "pkg:npm/@esbuild/sunos-x64@0.18.17",
        "pkg:npm/@esbuild/win32-arm64@0.18.17",
        "pkg:npm/@esbuild/win32-ia32@0.18.17",
        "pkg:npm/@esbuild/win32-x64@0.18.17"
      ]
    },
    {
      "ref": "pkg:npm/hsluv@1.0.1",
      "dependsOn": [
        "pkg:npm/esbuild@0.18.17",
        "pkg:npm/typescript@5.1.6"
      ]
    },
    {
      "ref": "pkg:npm/tmp",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/hsluv@1.0.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-24T14:19:31Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, September 24, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'hsluv' with version '1.0.1'. The application also has 1 child modules/components. The package type in this SBOM is npm with a single purl namespace '@esbuild' described under components. The components were identified from the source files: package-lock.json, test/tmp/package-lock.json."
    }
  ]
}