{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:91a3fae0-712e-40b0-b84c-f6c98c4c9b8c",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-10T18:37:22Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.5",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "harness-opencode-bridge",
      "group": "",
      "version": "0.0.0",
      "purl": "pkg:npm/harness-opencode-bridge@0.0.0",
      "bom-ref": "pkg:npm/harness-opencode-bridge@0.0.0",
      "properties": [],
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@hono\\n@modelcontextprotocol\\n@opencode-ai"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "dist/bridge/pnpm-lock.yaml\\nsrc/bridge/pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "group": "@hono",
      "name": "node-server",
      "version": "1.19.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7529de4b9aa189ab995860c278ae28ebde5777d9d4363be249908c42b8f5d1e7adafc5259f5b9c9fa6dba6138ce94ca700c32d348cd9352a4bf6f9c0489c2b3d"
        }
      ],
      "purl": "pkg:npm/%40hono/node-server@1.19.17",
      "type": "library",
      "bom-ref": "pkg:npm/@hono/node-server@1.19.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@modelcontextprotocol",
      "name": "sdk",
      "version": "1.32.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d83744f92243b732c4116cd8d598d8ed0f9570f85c5752a2b03df3238bb45d9ca4b6c8c7ba6d66c1b308f896ae954062d8e664f8a2408b6b8f5f3c627213e477"
        }
      ],
      "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.32.1",
      "type": "library",
      "bom-ref": "pkg:npm/@modelcontextprotocol/sdk@1.32.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "ImportedModules",
          "value": "@modelcontextprotocol/sdk/server/mcp.js,McpServer,@modelcontextprotocol/sdk/server/mcp.js/McpServer,@modelcontextprotocol/sdk/server/stdio.js,StdioServerTransport,@modelcontextprotocol/sdk/server/stdio.js/StdioServerTransport"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "true"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "official-sdk"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@modelcontextprotocol/sdk"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "tags": [
        "mcp",
        "mcp-sdk",
        "official-mcp-sdk",
        "trusted-source"
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 2
          },
          {
            "location": "src/bridge/host-tool-mcp.ts",
            "line": 7
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 3
          },
          {
            "location": "src/bridge/host-tool-mcp.ts",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "@opencode-ai",
      "name": "sdk",
      "version": "1.18.34",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47d41652972782d750e850a2c73ecd0ba9f55ac4a1a3a084b91533607cff0b365ca779a24a4943cd7926d280f05d50a7b84bbe00da1e3347fa443a79d6438ccd"
        }
      ],
      "purl": "pkg:npm/%40opencode-ai/sdk@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/@opencode-ai/sdk@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "ImportedModules",
          "value": "@opencode-ai/sdk/v2,createOpencodeClient,@opencode-ai/sdk/v2/createOpencodeClient,createOpencodeServer,@opencode-ai/sdk/v2/createOpencodeServer,QuestionInfo,@opencode-ai/sdk/v2/QuestionInfo"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "dist/bridge/index.mjs",
            "line": 8
          },
          {
            "location": "dist/bridge/index.mjs",
            "line": 1814
          },
          {
            "location": "dist/bridge/index.mjs",
            "line": 1824
          },
          {
            "location": "src/bridge/index.ts",
            "line": 16
          },
          {
            "location": "src/bridge/index.ts",
            "line": 229
          },
          {
            "location": "src/bridge/index.ts",
            "line": 239
          },
          {
            "location": "src/bridge/question-tool.ts",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5cbe0e82b4ac1f81d995a98d562225ca7374356e446a18b8bed96ffa6a8fba63b82efd10b046e021184ce1e41e0a96ccd2b932e0658baa16aa396c89a334a9e"
        }
      ],
      "purl": "pkg:npm/accepts@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/accepts@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-formats",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2252a979d04511fae51c7514371c3a9ae84572a3776870bf20e5627714d7169aeeb621b90652e7bfa44c8b056f1518a2ae7133e0a9e92ce1f214d43038ca8c1"
        }
      ],
      "purl": "pkg:npm/ajv-formats@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ajv-formats@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "8.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e16e58be3a53a3fa230f60505505f2773a60809da4b2367e0cd6fcfd4fa1a46b926df5b6bf1c8479ea3a32eb9b58ea4c7f142179557341f35f58eff194ac118"
        }
      ],
      "purl": "pkg:npm/ajv@8.20.0",
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9c1a626ea5a36083e414c152c0b9c0ee5aea0c67a117f621c346cc19e65b0d6049b03da4649cc3c22d9cf4ef24f356affcde9e28ff0cdb0d96c1ad3bc619323"
        }
      ],
      "purl": "pkg:npm/body-parser@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a9d5a6e52748af0e44b38dc68977112e9cde7f5ef92c149dac30115fabac74af285057fd9bfcac057b6d5c329987b4f3928a3f0af7dff049fa04b9339b9ae31"
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bound",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb2b3df7b53dea9a382b1fc0069042aa103d12ec49690583420ef6f791f8841a61bf72198346e804abb0629b78617a7a319e4099942753fb72313951a5a49e8e"
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/call-bound@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e634421fd67ff8344feeb92f63cdc1fb2188197f7a3987499b39e0aa7c364814b1a8214f774c36926dece626b0a465fc92b9f0486985d055b9361af41df6a2de"
        }
      ],
      "purl": "pkg:npm/content-disposition@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d38ea7dc045122a4a7570afe180d05827e670b64a9bcd65745d29028a53bf2ac51956dc47a3ff54001de46ecdfb4b53afc42a894d2d15a743e852b836d27038"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ff3bf77b19c642c8d97bfe1c1901beb4eabcea932bda0dcb4b99c91bc4bcc7bc50734c91ee1847687404dc3f7c884680eb2c790801326ebf36c5969fe48b671"
        }
      ],
      "purl": "pkg:npm/content-type@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/content-type@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fbeae53bdee9525eb0f5517178284d93331555c21b270a07c0c9383d93c3fa2866639572ab38b7b874940a2370718b9c237ac6681572561253560633d931b86"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca48b95e72ae7fbe74979d2e193965b7a90a20b6389d0d5e34841ab685c40726797568272aa6e7aa64eb044e41e0dee5acc24a436cad58c8933b6a34bfa130ff"
        }
      ],
      "purl": "pkg:npm/cookie@0.7.2",
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cors",
      "version": "2.8.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b49b590411c0eaf8c801a17a12721aaba95a0413fd6aafd8de8b9526311fa076d105c1c100761c321ff0f0b0eb9363ef20c32af209a8a5ae43e15f1199baf11b"
        }
      ],
      "purl": "pkg:npm/cors@2.8.6",
      "type": "library",
      "bom-ref": "pkg:npm/cors@2.8.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8"
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dunder-proto",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28837f9c3241411717c3430b561644f62407986ebca80548060f42aa65188e64088608a3f54e4c16faea9142f915bb72cb366e39e3add3375e45ee1463b72df8"
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/dunder-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4349fd1d18b89ba26e188575785966bc907b644571bbddc8accca232c182d25acc24c5b3460c7a586aaec9f4206556f7d6f8468179df98f34d5e6c673a4441ae"
        }
      ],
      "purl": "pkg:npm/encodeurl@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-define-property",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b79d17e07d4678acd18bdb7da05205f4e90372c9ecf4e0a76316b17e2d34683979ab3a014a0e0e0109db235bc1274faf5ea9d606991a49c223d560dac2696de"
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/es-define-property@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-errors",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3"
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/es-errors@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-object-atoms",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d6701a0de8d8a57aab52c9d2b616a1db4bf2e80ddda9aab9d01cbc89cc18f890ea7f932d8c58c37af78c4e7e42bcfd29d4b16d831fb11fc9597274a0ac9b567"
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/es-object-atoms@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventsource-parser",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9097b3163f5814030b78e4728bb6822f12db0f9fea58c427a0c56554fc8722597b96044909cdc95659fd56097d9f0422d1890c9e17464cc367ec2911440a6d32"
        }
      ],
      "purl": "pkg:npm/eventsource-parser@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/eventsource-parser@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "eventsource",
      "version": "3.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0914f5593cae4280fbef5196e7a5c464543f66849f5a27756a52860d832692ddb297c517ad5478a6ca6a58d11ca8abd523383a3c096d5a3c5c4923eb6e803888"
        }
      ],
      "purl": "pkg:npm/eventsource@3.0.7",
      "type": "library",
      "bom-ref": "pkg:npm/eventsource@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express-rate-limit",
      "version": "8.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4a6f7e22a4d5faf780c7e3cbcdf62ada935431df49dbd0f2d81d77c9830e18123882dd91266498703a9f957e2098c05cef153741f50900ad84b99176b6731d8"
        }
      ],
      "purl": "pkg:npm/express-rate-limit@8.5.2",
      "type": "framework",
      "bom-ref": "pkg:npm/express-rate-limit@8.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "express",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8484b889d5966a2ebd35ecc8751b76c455687da1788fee8834ea4995538b0cef335c6a54544573218935d94522d89ce313358bdc8380c5c4ee6e0cfd3e8d325f"
        }
      ],
      "purl": "pkg:npm/express@5.2.1",
      "type": "framework",
      "bom-ref": "pkg:npm/express@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-uri",
      "version": "3.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19932d6544cd4693952040a85f02cd652e7150613e99535b4c1f21ffb4708764c559c05088fcd3832662d39045f543192a42c9bfc5c14494e553bce0f3e65f32"
        }
      ],
      "purl": "pkg:npm/fast-uri@3.1.8",
      "type": "library",
      "bom-ref": "pkg:npm/fast-uri@3.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4bc2a866045937e6b9acdc2a4f195965e3e34ffe1c9e6d11395ef42de7511d9d29f2ef5f4480f484951942990a2f3ae8f0b7e60bcb31db76d8ead54dc6ff2940"
        }
      ],
      "purl": "pkg:npm/finalhandler@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "471fd6c9c67ad0739aa8b2808ba70744a288ef3c566c9df53219ed9adc0ca1a4de17b5c51fd861069f2f21368c89d7e58d143a7985822a46932beca45491cfd8"
        }
      ],
      "purl": "pkg:npm/fresh@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/fresh@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5f4a349aa2cfdf448548a7ec5226513a95fc21112ecb36d29a08121a987b23af69dad418800493e8d263a38f3f062435116ab9823c6a9a89583999f8dbf7c09"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-proto",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1349f063a17069f3d26f20a21e7eac3b53608279bb1cef892263a6b0886a202ada1219b823604fc6ffe97db05dcc5853cd73d21ca0e0b83837ca1dfc459a9d2"
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/get-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gopd",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65429187afe4505a0089302d4d83d9277870f70371c7e04804e8a39e51bd3e7ac9b027128ecd70cb20fabc9a5a62d827cc3aca6114aa7f738ee917daf77c6c46"
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5c0cd77027625aa2199bdec8383a629a301c2e0b8f2c6278b91d4c360efb02f0b8c64cb2bd87e79bd57e91cae3877b8853d142c25baf22a26863528294aa53d"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hasown",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f651b7db044177db089ea5722c3254d6f7e743602eb0321fedfef600e2db8e30aa96cff9f7bebd4d152c508b23fece4da65eca0c03f8bfeea57a2cabadd6dd4"
        }
      ],
      "purl": "pkg:npm/hasown@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/hasown@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hono",
      "version": "4.13.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc69e0ecd7e8ca4665da98ee916e59ebef18c66dc13d17fce864db427b7449bc9292f6b1e1fc8be07dc7858d5c0a90469a25bd5c3445cd157e0972b65bc42e75"
        }
      ],
      "purl": "pkg:npm/hono@4.13.8",
      "type": "library",
      "bom-ref": "pkg:npm/hono@4.13.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e056d17405fe6d2766a3801416e4b458d88fcfc36016dfabf138603569a5ae3423b7543b651f7ecd395c7b6f39f71e0a497af022c69e4ea0e82909ad3fca4b99"
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a6f438c40d0e79b3d7cbe04633380bf4c8caa6301499a7a1b456f1724cc3ca5b1892047523f4d5bfaaa2e65d4c17aeb33b02fa9295309fbea45bd1c33cc98ab"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.7.2",
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip-address",
      "version": "10.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffe4ba8f813d007bd6f5258c48463d5dfcbae8ee4f5af544274f0ed32e491b210a429a236f42b418aa73fefe4727f1b4be2dc3dac8c62bbf35d7da1765e134a8"
        }
      ],
      "purl": "pkg:npm/ip-address@10.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/ip-address@10.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86fa6823a928ae124c9de8f6f3975283a9eed7e7babb1b3bcc6dc16009b96f2a83b2024d5b0c7333acfa8998808104784c9df42660533b0a99530dd69721f701"
        }
      ],
      "purl": "pkg:npm/is-promise@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jose",
      "version": "6.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61854322740a1497d1ff16b7a2351397c7362a84f088bd51e5683d602c9dc07d31d01f60adbce58391c2ee63230ad5098db43f627184648848e6d0a07d36f81f"
        }
      ],
      "purl": "pkg:npm/jose@6.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/jose@6.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "security"
      ]
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-typed",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d08685dd72f737576f31ec2ec132ce0fe7e90d96051445eda39944f54fffe8051303aeacb540f7a52629b0646a3b1e0f553d5dc4415e419eae216c5cb6bdeb4"
        }
      ],
      "purl": "pkg:npm/json-schema-typed@8.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-typed@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6"
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a2b27ac33f818d7b4e9470a1675796df30d3c1530e23b0b19a5b059f9c7defd361a706e5d7d8c0959f945bad6a348f7a5ccd48a561b96aedf43b370dade572b"
        }
      ],
      "purl": "pkg:npm/media-typer@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a7937d785796b214b869ddf914444b9be96b6305f3dd08f6352e7f3ff26ba7b8bba2621b000600555aca33006f8c58c6d512f71d7296e2f51ef0c36da5f50de"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.54.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "694e4426e20dd960de982700a76bc505fa7f9b810085626750d492c348b1b3bfe45db77a3e0eb8126c0990d745841f1a5add6c1f60935eb2f1a3f880195de83d"
        }
      ],
      "purl": "pkg:npm/mime-db@1.54.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.54.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2db833764d21e23ba843d7c22975b86f2d1426a8fe9ce3ab23d309d6c4a3e2723c688d9ea35aa6bd01227b8543d6096c4b6e749f5e4bb16b18b42ba0892b52e4"
        }
      ],
      "purl": "pkg:npm/mime-types@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0e7ecfc051087c31a11cae5ab9c4e5f4090f72a53179765efc9a394c35f38ad3c7f3a604c741140f07170f944b48c34c91a70b3e668ff7afee5645bcbbbb71a"
        }
      ],
      "purl": "pkg:npm/negotiator@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.13.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5baee22e5e09d845c41936df78709f7eb8c37e2b6f2c0360d14957df01545124f1f762974457a0307515812a84fb0be101b8b85aa8c683d733cac4d5d84a5b7b"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.4",
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.13.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-ai",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f56512d93d2de071c35735efbb04c71749ef857bd9f66434afea330af29d26ed0b5684293b3a805b8a964c2df280d73939e75c73b8fe39cb76e096254189f248"
        }
      ],
      "purl": "pkg:npm/opencode-ai@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-ai@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin, linux, win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64, x64"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-darwin-arm64",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a8044bdcde7500eb8c1a0c856ca6187dd8b8098324dbabeb917743aeaddaaa4fd58423dae9e09ecdac0db835f2fa7a909ad57af4e939d1c79fad87d5b74ffb0"
        }
      ],
      "purl": "pkg:npm/opencode-darwin-arm64@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-darwin-arm64@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-darwin-x64-baseline",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "585f647701910e4b2cea3051ea54776c6eba53cd38a2711a44e634cd1b695b1daeca16b12ad2e7395ef8058b92ef599eaa46ecc4b340d5264a7e2f2abd2f0724"
        }
      ],
      "purl": "pkg:npm/opencode-darwin-x64-baseline@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-darwin-x64-baseline@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-darwin-x64",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3c2974388cfe737c41c9018a42cf921fb3469ae5d5fedbac322dbc4712f7f2189bbc86b06836225e7773c4d2e88f2251c2ae3e72cc5d1bea4e5a5a89da3dc4f"
        }
      ],
      "purl": "pkg:npm/opencode-darwin-x64@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-darwin-x64@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "darwin"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-linux-arm64-musl",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de209461c2746bacf8423aa0a42080d06d1c24708d8894a0eb3c54cfd9d066f43cb40247d1f82b23c42ee44dd1b91bc5c24ef9a0e40bf221c15b9703dcfc2baf"
        }
      ],
      "purl": "pkg:npm/opencode-linux-arm64-musl@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-linux-arm64-musl@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "musl"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-linux-arm64",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6528ea707d0c11b0332c49a4442f40a29d4f6d66717b636e28e34013fc7c31141d8ca74e7a95fb339d14a636ec36888b3243f9f3867df0c8386b8d9f261a2ebc"
        }
      ],
      "purl": "pkg:npm/opencode-linux-arm64@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-linux-arm64@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-linux-x64-baseline-musl",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d734105ee0c04ac1ad66b1075574a76be89e3ccd6e330b4e61fbeea7f5adafc2b9bdcd4411e67ed9712eaabd59c4a6b97fa92071f494d365b911ac1e0521ecd"
        }
      ],
      "purl": "pkg:npm/opencode-linux-x64-baseline-musl@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-linux-x64-baseline-musl@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "musl"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-linux-x64-baseline",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4ad582f35b2a006cec8a0eb4d94eb1ba2dedd18fe426d65198977e1f5c584d8ef354b219e08b9c6f55a9d27a3a03bfec0e3e95aad14a74bef5f2eb07f76b0704"
        }
      ],
      "purl": "pkg:npm/opencode-linux-x64-baseline@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-linux-x64-baseline@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-linux-x64-musl",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e282b0683129e8cf2b390b996cf18653ad43cd34dd4085bc9289bef22444e4a8645414e920d59d5e4d49f3f5d5c9457b21580e27d7974e568f92ab1d4560f22"
        }
      ],
      "purl": "pkg:npm/opencode-linux-x64-musl@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-linux-x64-musl@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:libc",
          "value": "musl"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-linux-x64",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45300c8c2bdee1ebb13f640a2eebd199da16e49e4340ad43899aadfbbb257e2c728c0122efd402d837f6a182a88226da008e08114f2ecde9e825e125de4f9413"
        }
      ],
      "purl": "pkg:npm/opencode-linux-x64@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-linux-x64@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "linux"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-windows-arm64",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b5b029993f2c158c74da2bcf004964cb391d94705ef42c136225d74aa011bc6316fbd1abe5f86525a4d35ad36e84eb2f53f38b379f9c59d3b64beeee96a3713"
        }
      ],
      "purl": "pkg:npm/opencode-windows-arm64@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-windows-arm64@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "arm64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-windows-x64-baseline",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "360e11e410d64bfc47987ca3042da14296a422bbeedef62f3bb536a05f36d318e2875549978cce379d951ad4f8661d68ea46dff1feacef22cf333cdb946497bb"
        }
      ],
      "purl": "pkg:npm/opencode-windows-x64-baseline@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-windows-x64-baseline@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opencode-windows-x64",
      "version": "1.18.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35bc352541dc31dfba65a6fdeedbe1891ff0ccc06bb456c7328837c3e1ecb01aadd34ebc04b7693da74b9a8ef6faf3ed06ef99c57219cea341f51deab5c6bbaa"
        }
      ],
      "purl": "pkg:npm/opencode-windows-x64@1.18.34",
      "type": "library",
      "bom-ref": "pkg:npm/opencode-windows-x64@1.18.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:os",
          "value": "win32"
        },
        {
          "name": "cdx:npm:cpu",
          "value": "x64"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "8.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9172e21d3faf4d3e6e2a6c008af9a0e8808e42043322d6329ed2bcb9ad2409cfc2552ec0bb8d5f17a622631912cba25dcdf91e6284661cacf2d39e8ea901d04"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@8.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@8.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkce-challenge",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c10d1bfd6e05af4d6ab691e5a92aaca5c8f712106f8a6b1d8742a51e11fc1d166732c11ad1e6b67d350b397392f5c710af7a26f86706464e1efa2b2b65657ca9"
        }
      ],
      "purl": "pkg:npm/pkce-challenge@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pkce-challenge@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e679f1d321b2554718eadf519d6700456b704fd1750fc3bdaedd3c86d3ef9dde3d5b522066d98b921bbd59f333423d5c1718c720ee9ca279d43555b993b015c9"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.8",
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87a7e1388691ac80f609b118d9faacfbbb7e517668f8c2c09d4e60448abce6e16d76250f09db00a4c947857a202953381ccd8355b22318d4d3607d8e7263f5bc"
        }
      ],
      "purl": "pkg:npm/qs@6.16.0",
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b9cd08c3965c5691fed9e7125d574fc1d164cdab1eafc46ef4cc9138374901b382e8be6118589cd01b10bd6d2f5100abb76e0338d25adde73a0b275d8c43904"
        }
      ],
      "purl": "pkg:npm/raw-body@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "router",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cb4eb50a9b653288beeb9616a9bbf665e3917036091919a0a965b2076a30d883094908eccb4a4f9c20f027b04a95f79e468c82c99ca6dd402d6754fcfe80061"
        }
      ],
      "purl": "pkg:npm/router@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/router@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d609d97fb0c572821c6a34e34f08f0b838f3bb3e0f3dc6364ad28f96c180435f981f6d08455ac169749699d8e8c1327abbc45cd353e860e1875df3f599871935"
        }
      ],
      "purl": "pkg:npm/send@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/send@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c515c19f4a4fa904d54220bcc3242b2acd8c3a55f6e334343ce19a8f492e96dbe8382b2d050339caf3a1015494c0e32342d4efb0f5a83421df3c6c1a6902614f"
        }
      ],
      "purl": "pkg:npm/serve-static@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-list",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a39ffd1b8bfa145118dce5797b21a5a2fce24926e9aea0915025f0c3c8ee3afa1056b1f69533ae53047ab67a864187397d11c8713a28e991b442f12541414d3"
        }
      ],
      "purl": "pkg:npm/side-channel-list@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-list@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-map",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5428c235f80cb1bcb7b53768d369db8ed33f7b0adaea33c79a94e17a7913621f291bdb9c67fd4ff12a38bb814605e93f063a4e56c0c23282c0fe2b8128815744"
        }
      ],
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58f4bf1ef1d04d89c78ac2e8f4c72a0473899361641cefed969be5772ae77a6e1a790a7885a8b7832b61b3083aa74d684a84e5e7cadca621408c5d9baf6024d8"
        }
      ],
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb1e9d2bacc97694f3178b1078d631c2dbc1cdfe848381ad95eb12f781cebd3b9d51ec8ad965c06887e60e0b32b2562b441785225b22e78018b05194ba19afad"
        }
      ],
      "purl": "pkg:npm/side-channel@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ef132e795770c1eee927468fb888e193e5f3f5b2547cc10a2155d9278a064f32932cb5a289416870898040089137525da94e70138a18416274616501c606247"
        }
      ],
      "purl": "pkg:npm/statuses@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7da607c346a705b73f916177cc54c49f14853801945fd1856ce06d86f0dd2ec22512858e14eb52d3380289063022c90bf6219764bde40170fc3a86781a63004c"
        }
      ],
      "purl": "pkg:npm/type-is@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/type-is@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "8.21.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56ca76f1bec345c8a6150bebaaed967a4df3d626310c25aa1d807c42c9e4fd2e117da090ccf18fc8136e563255ddc77a5222ad52da7ab0d33bee05afcdc087fa"
        }
      ],
      "purl": "pkg:npm/ws@8.21.0",
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "ImportedModules",
          "value": "ws,WebSocket,ws/WebSocket,WebSocketServer,ws/WebSocketServer"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 5
          },
          {
            "location": "dist/bridge/index.mjs",
            "line": 5
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 56
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zod-to-json-schema",
      "version": "3.25.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bf3e07e7a53d712920de4184827d12391b2de13dff7598a543b982d41d924c883169b6f3f8d4c4a75a87e6f1d9c29b4db9e9935f64833b0d2cee48c0059e31c"
        }
      ],
      "purl": "pkg:npm/zod-to-json-schema@3.25.2",
      "type": "library",
      "bom-ref": "pkg:npm/zod-to-json-schema@3.25.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zod",
      "version": "3.25.76",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83352dfeab7cd675ec14628815c0b76277c4031e4d92e9c27e70e5bee0524854b4d9b717bb82e679ad001485306cb5b158fc7777da7c4b94286ae8ca70d43171"
        }
      ],
      "purl": "pkg:npm/zod@3.25.76",
      "type": "library",
      "bom-ref": "pkg:npm/zod@3.25.76",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/bridge/pnpm-lock.yaml"
        },
        {
          "name": "ImportedModules",
          "value": "zod/v4,zod/v4/z"
        },
        {
          "name": "SrcFile",
          "value": "dist/bridge/pnpm-lock.yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "dist/bridge/pnpm-lock.yaml"
              }
            ],
            "concludedValue": "dist/bridge/pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "dist/index.js",
            "line": 6
          },
          {
            "location": "dist/index.js",
            "line": 703
          },
          {
            "location": "dist/index.js",
            "line": 704
          },
          {
            "location": "dist/index.js",
            "line": 705
          },
          {
            "location": "dist/index.js",
            "line": 706
          },
          {
            "location": "dist/index.js",
            "line": 707
          },
          {
            "location": "dist/index.js",
            "line": 708
          },
          {
            "location": "dist/index.js",
            "line": 709
          },
          {
            "location": "dist/index.js",
            "line": 710
          },
          {
            "location": "dist/index.js",
            "line": 711
          },
          {
            "location": "dist/index.js",
            "line": 713
          },
          {
            "location": "dist/index.js",
            "line": 723
          },
          {
            "location": "dist/index.js",
            "line": 734
          },
          {
            "location": "dist/index.js",
            "line": 735
          },
          {
            "location": "dist/index.js",
            "line": 736
          },
          {
            "location": "dist/index.js",
            "line": 743
          },
          {
            "location": "dist/index.js",
            "line": 744
          },
          {
            "location": "dist/index.js",
            "line": 745
          },
          {
            "location": "dist/index.js",
            "line": 746
          },
          {
            "location": "dist/index.js",
            "line": 753
          },
          {
            "location": "dist/index.js",
            "line": 754
          },
          {
            "location": "dist/index.js",
            "line": 755
          },
          {
            "location": "dist/index.js",
            "line": 756
          },
          {
            "location": "dist/index.js",
            "line": 757
          },
          {
            "location": "dist/index.js",
            "line": 764
          },
          {
            "location": "dist/index.js",
            "line": 770
          },
          {
            "location": "dist/index.js",
            "line": 771
          },
          {
            "location": "dist/index.js",
            "line": 772
          },
          {
            "location": "dist/index.js",
            "line": 779
          },
          {
            "location": "dist/index.js",
            "line": 780
          },
          {
            "location": "dist/index.js",
            "line": 781
          },
          {
            "location": "dist/index.js",
            "line": 786
          },
          {
            "location": "dist/index.js",
            "line": 790
          },
          {
            "location": "dist/index.js",
            "line": 791
          },
          {
            "location": "dist/index.js",
            "line": 792
          },
          {
            "location": "dist/index.js",
            "line": 797
          },
          {
            "location": "dist/index.js",
            "line": 801
          },
          {
            "location": "dist/index.js",
            "line": 802
          },
          {
            "location": "dist/index.js",
            "line": 803
          },
          {
            "location": "dist/index.js",
            "line": 804
          },
          {
            "location": "dist/index.js",
            "line": 809
          },
          {
            "location": "dist/index.js",
            "line": 810
          },
          {
            "location": "dist/index.js",
            "line": 811
          },
          {
            "location": "dist/index.js",
            "line": 812
          },
          {
            "location": "dist/index.js",
            "line": 817
          },
          {
            "location": "dist/index.js",
            "line": 818
          },
          {
            "location": "dist/index.js",
            "line": 819
          },
          {
            "location": "dist/index.js",
            "line": 820
          },
          {
            "location": "dist/index.js",
            "line": 821
          },
          {
            "location": "dist/index.js",
            "line": 823
          },
          {
            "location": "dist/index.js",
            "line": 824
          },
          {
            "location": "dist/index.js",
            "line": 826
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 4
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 20
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 29
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 33
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 34
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 35
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 36
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 37
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 38
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 39
          },
          {
            "location": "dist/bridge/host-tool-mcp.mjs",
            "line": 40
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 1
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 35
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 52
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 62
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 64
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 66
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 68
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 70
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 72
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 74
          },
          {
            "location": "src/bridge/json-schema-to-zod.ts",
            "line": 76
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 7
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 13
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 14
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 15
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 16
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 17
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 18
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 19
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 20
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 21
          },
          {
            "location": "src/opencode-bridge-protocol.ts",
            "line": 26
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 57
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 139
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 151
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 152
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 153
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 160
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 161
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 162
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 163
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 170
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 171
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 172
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 173
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 174
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 181
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 182
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 189
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 190
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 191
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 198
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 199
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 200
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 205
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 206
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 211
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 212
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 213
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 218
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 219
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 224
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 225
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 227
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 228
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 229
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 230
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 238
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 239
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 240
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 241
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 247
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 248
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 249
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 250
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 251
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 254
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 255
          },
          {
            "location": "src/opencode-harness.ts",
            "line": 257
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/harness-opencode-bridge@0.0.0",
      "dependsOn": [
        "pkg:npm/@modelcontextprotocol/sdk@1.32.1",
        "pkg:npm/@opencode-ai/sdk@1.18.34",
        "pkg:npm/opencode-ai@1.18.34",
        "pkg:npm/ws@8.21.0",
        "pkg:npm/zod@3.25.76"
      ]
    },
    {
      "ref": "pkg:npm/@hono/node-server@1.19.17",
      "dependsOn": [
        "pkg:npm/hono@4.13.8"
      ]
    },
    {
      "ref": "pkg:npm/@modelcontextprotocol/sdk@1.32.1",
      "dependsOn": [
        "pkg:npm/@hono/node-server@1.19.17",
        "pkg:npm/ajv-formats@3.0.1",
        "pkg:npm/ajv@8.20.0",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/cors@2.8.6",
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/eventsource-parser@3.1.0",
        "pkg:npm/eventsource@3.0.7",
        "pkg:npm/express-rate-limit@8.5.2",
        "pkg:npm/express@5.2.1",
        "pkg:npm/hono@4.13.8",
        "pkg:npm/jose@6.2.3",
        "pkg:npm/json-schema-typed@8.0.2",
        "pkg:npm/pkce-challenge@5.0.1",
        "pkg:npm/raw-body@3.0.2",
        "pkg:npm/zod-to-json-schema@3.25.2",
        "pkg:npm/zod@3.25.76"
      ]
    },
    {
      "ref": "pkg:npm/@opencode-ai/sdk@1.18.34",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.6"
      ]
    },
    {
      "ref": "pkg:npm/accepts@2.0.0",
      "dependsOn": [
        "pkg:npm/mime-types@3.0.2",
        "pkg:npm/negotiator@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv-formats@3.0.1",
      "dependsOn": [
        "pkg:npm/ajv@8.20.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@8.20.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-uri@3.1.8",
        "pkg:npm/json-schema-traverse@1.0.0",
        "pkg:npm/require-from-string@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@2.3.0",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/content-type@2.0.0",
        "pkg:npm/debug@4.4.3",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/iconv-lite@0.7.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/qs@6.16.0",
        "pkg:npm/raw-body@3.0.2",
        "pkg:npm/type-is@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bytes@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/function-bind@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/call-bound@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cors@2.8.6",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.6",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@4.4.3",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/depd@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dunder-proto@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/gopd@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-define-property@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-errors@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-object-atoms@1.1.2",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eventsource-parser@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eventsource@3.0.7",
      "dependsOn": [
        "pkg:npm/eventsource-parser@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/express-rate-limit@8.5.2",
      "dependsOn": [
        "pkg:npm/express@5.2.1",
        "pkg:npm/ip-address@10.2.0"
      ]
    },
    {
      "ref": "pkg:npm/express@5.2.1",
      "dependsOn": [
        "pkg:npm/accepts@2.0.0",
        "pkg:npm/body-parser@2.3.0",
        "pkg:npm/content-disposition@1.1.0",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/cookie-signature@1.2.2",
        "pkg:npm/cookie@0.7.2",
        "pkg:npm/debug@4.4.3",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@2.1.1",
        "pkg:npm/fresh@2.0.0",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/merge-descriptors@2.0.0",
        "pkg:npm/mime-types@3.0.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/once@1.4.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/proxy-addr@2.0.8",
        "pkg:npm/qs@6.16.0",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/router@2.2.0",
        "pkg:npm/send@1.2.1",
        "pkg:npm/serve-static@2.2.1",
        "pkg:npm/statuses@2.0.2",
        "pkg:npm/type-is@2.1.0",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-uri@3.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@2.1.1",
      "dependsOn": [
        "pkg:npm/debug@4.4.3",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/forwarded@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fresh@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-bind@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.3.0",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.2",
        "pkg:npm/function-bind@1.1.2",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/hasown@2.0.4",
        "pkg:npm/math-intrinsics@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/get-proto@1.0.1",
      "dependsOn": [
        "pkg:npm/dunder-proto@1.0.1",
        "pkg:npm/es-object-atoms@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/gopd@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-symbols@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hasown@2.0.4",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/hono@4.13.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.1",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.2",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.7.2",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ip-address@10.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-promise@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jose@6.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-typed@8.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/math-intrinsics@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/media-typer@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.54.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@3.0.2",
      "dependsOn": [
        "pkg:npm/mime-db@1.54.0"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/negotiator@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-inspect@1.13.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.4.1",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/opencode-ai@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-darwin-arm64@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-darwin-x64-baseline@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-darwin-x64@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-linux-arm64-musl@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-linux-arm64@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-linux-x64-baseline-musl@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-linux-x64-baseline@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-linux-x64-musl@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-linux-x64@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-windows-arm64@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-windows-x64-baseline@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opencode-windows-x64@1.18.34",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@8.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkce-challenge@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.8",
      "dependsOn": [
        "pkg:npm/forwarded@0.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.16.0",
      "dependsOn": [
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/side-channel@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@3.0.2",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/iconv-lite@0.7.2",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/require-from-string@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/router@2.2.0",
      "dependsOn": [
        "pkg:npm/debug@4.4.3",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/is-promise@4.0.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/path-to-regexp@8.4.2"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@1.2.1",
      "dependsOn": [
        "pkg:npm/debug@4.4.3",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@2.0.0",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/mime-types@3.0.2",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@2.2.1",
      "dependsOn": [
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/setprototypeof@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel-list@1.0.1",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pkg:npm/side-channel-map@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/side-channel-map@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/side-channel@1.1.1",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/side-channel-list@1.0.1",
        "pkg:npm/side-channel-map@1.0.1",
        "pkg:npm/side-channel-weakmap@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/statuses@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@2.1.0",
      "dependsOn": [
        "pkg:npm/content-type@2.0.0",
        "pkg:npm/media-typer@1.1.0",
        "pkg:npm/mime-types@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@8.21.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zod-to-json-schema@3.25.2",
      "dependsOn": [
        "pkg:npm/zod@3.25.76"
      ]
    },
    {
      "ref": "pkg:npm/zod@3.25.76",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/harness-opencode-bridge@0.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.5",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-10T18:37:23Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'harness-opencode-bridge' with version '0.0.0'. The package type in this SBOM is npm with 3 purl namespaces described under components. The components were identified from the source files: dist/bridge/pnpm-lock.yaml, src/bridge/pnpm-lock.yaml."
    }
  ]
}