{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:897817e9-c3e5-4d74-a3ec-bb7e3c979bfa",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-10T06:31:10Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.5",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "dts-buddy",
      "group": "",
      "version": "0.2.5",
      "description": "A tool for creating .d.ts bundles",
      "purl": "pkg:npm/dts-buddy@0.2.5",
      "bom-ref": "pkg:npm/dts-buddy@0.2.5",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "./src/cli.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prepublishOnly, test, check, lint, format"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Rich-Harris/dts-buddy"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jridgewell\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.3",
      "description": "Generate source maps",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cb85258e2d18bcef9ce38cc1bfafe36fd28096f2e9866f4060121c97ddd0d7dde83066d07c3ea2e78f3df279db7c4794ad06bcdc838681a6787c500f43d41a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:install, benchmark:only, prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.1",
      "description": "Resolve a URI relative to an optional base URI",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75261987b1e1083b422a6e106a45f4c45a6c443aa38ed65ffe48c8fefdd3dcdc2de6bf3fab3fccd7d17dc92c8ea94f78497066786f6db53ba5f989d1e0b3b114"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.2",
      "description": "Like a Set, but provides the index of the `key` in the backing array",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "source-map",
      "version": "0.3.5",
      "description": "Packages @jridgewell/trace-mapping and @jridgewell/gen-mapping into the familiar source-map API",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "513600523ff0be2c1db0c7f3a1226ca49c5b907e68d6c9f3c17d3fff410d5f5bbfe7992465991c4d93fabbd6f028692ff9d924f5ab789b50a9b74b98f3491ca5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/source-map@0.3.5",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "prebuild, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch, prepublishOnly, preversion"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "ImportedModules",
          "value": "@jridgewell/source-map,SourceMapGenerator,@jridgewell/source-map/SourceMapGenerator"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/index.js",
            "line": 6
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.15",
      "description": "Encode/decode sourcemap mappings",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "785dabc4246e9442971d34620eb0f2e9eacc616a8dc382cf750f14400e21baec5a42c55e44f165da833ca031b130584951665ff4c7292ed25ab030d96ff0697a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemap-codec.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, pretest, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:coverage, test:watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "ImportedModules",
          "value": "@jridgewell/sourcemap-codec,decode,@jridgewell/sourcemap-codec/decode"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils.js",
            "line": 8
          },
          {
            "location": "src/utils.js",
            "line": 161
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.19",
      "description": "Trace the original position through a source map",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91fdfb42d7d6f87c31fdbb9618c3dc47ad2217dce21daeabfc26492076e6726e3ed2aad78957717a0007d05eb275d11543bcdd9237060a00b352ef8171b850c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.19",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/trace-mapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "benchmark, benchmark:install, benchmark:only, build, build:rollup, build:ts, lint, lint:prettier, lint:ts, prebuild, prepublishOnly, preversion, test, test:debug, test:lint, test:lint:prettier, test:lint:ts, test:only, test:watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:rollup, build:ts, test:watch"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "globrex",
      "version": "0.1.2",
      "description": "TypeScript definitions for globrex",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bef225baf4b9c469ee47d3d3f18e9988dc2749c8a513040a03caa5b1e93e5ec215f9ba704761842c1985e55d03fc9771c4fd8ef5becc0f02fc64242f7615085"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/globrex@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/globrex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/globrex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "/app/node_modules/@types/globrex"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "20.5.6",
      "description": "TypeScript definitions for Node.js",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a2e704463db6f23935fee18da250b436ee850fade7da0743f11902677f258dde4bc40c633798807933f8102e68ad65fec0f4598b79aab10f72f5097a66dd529"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@20.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@20.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "/app/node_modules/@types/node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "dequal",
      "version": "2.0.3",
      "description": "A tiny (304B to 489B) utility for check for deep equality",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d237bea8f28710ca21bdf453084a370ab3c6e9c033018826ccacb1462612483912e9e1897725499bb59a600e4409a003f702c1d93e0411eca603968555c61708"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dequal@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/dequal@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, pretest, postbuild, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.1.0",
      "description": "A javascript text diff implementation.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fe9a4faa13c542fcf014ae5014df837e55f5debf48217b9cb09a9aab6b0a6199565cd5b11f9f9eaea3daa9c86a75a78c69cce1e4496e33b4177a2fb5f1e000b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "clean, build:node, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build:node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Terkel Gjervig"
        }
      ],
      "group": "",
      "name": "globalyzer",
      "version": "0.1.0",
      "description": "Detects and extract the glob part of a string",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e34a0d4ccf547c6e9a066b8ac64fe08879f99d0f11573fd24b822beb38333aff7fa82de4299f6fe1eb464dc25b125fcdc95407ec5194eddf97d5e82be7b31dd9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globalyzer@0.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/terkelg/globalyzer"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globalyzer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Terkel Gjervig"
        }
      ],
      "group": "",
      "name": "globrex",
      "version": "0.1.2",
      "description": "Glob to regular expression with support for extended globs",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b872606f000cc0d15fe662ecb7b2162cd835e31d4291eaa09496ff2b77688b8770eaad88bc002633f63cd647afcbcdf03fe4acb7e9eeb454d838683777596cc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globrex@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/terkelg/globrex"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globrex@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "ImportedModules",
          "value": "globrex"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils.js",
            "line": 4
          },
          {
            "location": "src/utils.js",
            "line": 107
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "kleur",
      "version": "4.1.5",
      "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3e34efbc5ab462404138ffb9f044984dd475a9566266e75d690475313cbb69d015084b3941a653916129937250a726f42adad2aefec825df156991ced95ae41"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kleur@4.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/kleur@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "ImportedModules",
          "value": "kleur"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/cli.js",
            "line": 5
          },
          {
            "location": "src/cli.js",
            "line": 14
          },
          {
            "location": "src/cli.js",
            "line": 20
          },
          {
            "location": "src/cli.js",
            "line": 83
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "locate-character",
      "version": "3.0.0",
      "description": "Get the line and column number of a specific character in a string",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "496d77c2cec18da789ea9ed0e823b69dc85b6047375f727a5ab9934c3b68ef230fa954994d4c98e538db89df806fc80b9c04edca062d8832091904519f664e88"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-character@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://gitlab.com/Rich-Harris/locate-character#README"
        },
        {
          "type": "vcs",
          "url": "git+https://gitlab.com/Rich-Harris/locate-character.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-character@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, build, prepublishOnly"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "ImportedModules",
          "value": "locate-character,getLocator,locate-character/getLocator"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/index.js",
            "line": 5
          },
          {
            "location": "src/index.js",
            "line": 181
          },
          {
            "location": "src/utils.js",
            "line": 7
          },
          {
            "location": "src/utils.js",
            "line": 133
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "magic-string",
      "version": "0.30.3",
      "description": "Modify strings, generate sourcemaps",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "07bc466e59767c6fd58cff925a0e2c5f72729f0214d268e84dce8c3e928db88bdfb64eaeeafaa10e793547cd1bf02d86051eb2c2acbed4370a06b7af060f9b9b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/magic-string@0.30.3",
      "type": "library",
      "bom-ref": "pkg:npm/magic-string@0.30.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, changelog, format, lint, prepare, prepublishOnly, release, pretest, test, bench, watch"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, watch"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "ImportedModules",
          "value": "magic-string"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/create-module-declaration.js",
            "line": 4
          },
          {
            "location": "src/index.js",
            "line": 4
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "mri",
      "version": "1.2.0",
      "description": "Quickly scan for CLI flags and arguments",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b73cec91bddb1bc2ef606145fe60d3a6ade3a48e90f707372c49816a086ef83742b2c77515a90dec17348553661321aad5bab74607e409bddc9902e934f3aba0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mri@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/mri@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, bench, pretest, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "James Long"
        }
      ],
      "group": "",
      "name": "prettier",
      "version": "3.0.2",
      "description": "Prettier is an opinionated code formatter",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a36611f6ab67897bf011994e29bbde29f0d0572ab16c42169f8f19f26dd9263063702994cb7c59188bfeec091a7ae693afac8f5c98f0bf4ed95a5b166c4cb5ad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.0.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://prettier.io"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "./bin/prettier.cjs"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "sade",
      "version": "1.8.1",
      "description": "Smooth (CLI) operator 🎶",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5a9770995f55e5a3f938029c0216b1d50028bd7c1a89ed5fa6c2106cb9fff520e29b072d3df057b1f966bfe5032e6f0d3da5267fbbc118f0f5a07af26c5e9d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sade@1.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/sade@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "ImportedModules",
          "value": "sade"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/cli.js",
            "line": 4
          },
          {
            "location": "src/cli.js",
            "line": 23
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Terkel Gjervig <terkel@terkel.com> (https://terkel.com)"
        }
      ],
      "group": "",
      "name": "tiny-glob",
      "version": "0.2.9",
      "description": "Tiny and extremely fast globbing",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83fe79b2c44f5234a187ec647f1f543c35ea85c90712c1ebe1577dcd7e79a1274665cfcc0f49b7b1f7ab3a4c16b69f7c6effa47157c41ed449801549cde96bce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tiny-glob@0.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/tiny-glob@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "bench, test"
        },
        {
          "name": "ImportedModules",
          "value": "tiny-glob/sync.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils.js",
            "line": 3
          },
          {
            "location": "src/utils.js",
            "line": 92
          },
          {
            "location": "src/utils.js",
            "line": 95
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Goldberg <npm@joshuakgoldberg.com>"
        }
      ],
      "group": "",
      "name": "ts-api-utils",
      "version": "1.0.2",
      "description": "Utility functions for working with TypeScript's API. Successor to the wonderful tsutils.",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09bbb89c8aa711d77e4c7344b01764a259ce5e183423c5ed7a81da10a82fb31a6c6d675ae08b14badd9cd7cec7c72c100afbdea23a30d03830fda9b1b5229591"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ts-api-utils@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/JoshuaKGoldberg/ts-api-utils"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-api-utils@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, docs, docs:serve, format, format:write, lint, lint:docs, lint:knip, lint:knip:production, lint:md, lint:package, lint:packages, lint:spelling, prepare, should-semantic-release, test, type-check"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "ImportedModules",
          "value": "ts-api-utils"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/create-module-declaration.js",
            "line": 3
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 248
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 273
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 276
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 344
          },
          {
            "location": "src/utils.js",
            "line": 6
          },
          {
            "location": "src/utils.js",
            "line": 292
          },
          {
            "location": "src/utils.js",
            "line": 295
          },
          {
            "location": "src/utils.js",
            "line": 355
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.0.4",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "716f53e56f71637edc73e8df127694bd7f757e8c6d1e4cdadcdc37c24a05e2c4a52a7d0c38d7647449dd8a0fea3c15973649a9961dcdcdac90cc2887338fe1ab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.0.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, test:eslint-rules, build, build:compiler, build:tests, build:tests:notypecheck, start, clean, gulp, lint, setup-hooks"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build:compiler, build:tests, build:tests:notypecheck"
        },
        {
          "name": "ImportedModules",
          "value": "typescript"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "src/create-module-declaration.js",
            "line": 2
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 239
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 240
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 247
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 255
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 256
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 257
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 371
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 372
          },
          {
            "location": "src/create-module-declaration.js",
            "line": 373
          },
          {
            "location": "src/index.js",
            "line": 3
          },
          {
            "location": "src/index.js",
            "line": 72
          },
          {
            "location": "src/index.js",
            "line": 75
          },
          {
            "location": "src/index.js",
            "line": 157
          },
          {
            "location": "src/index.js",
            "line": 159
          },
          {
            "location": "src/index.js",
            "line": 160
          },
          {
            "location": "src/index.js",
            "line": 179
          },
          {
            "location": "src/index.js",
            "line": 187
          },
          {
            "location": "src/index.js",
            "line": 188
          },
          {
            "location": "src/index.js",
            "line": 197
          },
          {
            "location": "src/index.js",
            "line": 198
          },
          {
            "location": "src/index.js",
            "line": 199
          },
          {
            "location": "src/utils.js",
            "line": 5
          },
          {
            "location": "src/utils.js",
            "line": 132
          },
          {
            "location": "src/utils.js",
            "line": 168
          },
          {
            "location": "src/utils.js",
            "line": 169
          },
          {
            "location": "src/utils.js",
            "line": 176
          },
          {
            "location": "src/utils.js",
            "line": 180
          },
          {
            "location": "src/utils.js",
            "line": 192
          },
          {
            "location": "src/utils.js",
            "line": 220
          },
          {
            "location": "src/utils.js",
            "line": 221
          },
          {
            "location": "src/utils.js",
            "line": 223
          },
          {
            "location": "src/utils.js",
            "line": 249
          },
          {
            "location": "src/utils.js",
            "line": 250
          },
          {
            "location": "src/utils.js",
            "line": 252
          },
          {
            "location": "src/utils.js",
            "line": 269
          },
          {
            "location": "src/utils.js",
            "line": 270
          },
          {
            "location": "src/utils.js",
            "line": 271
          },
          {
            "location": "src/utils.js",
            "line": 300
          },
          {
            "location": "src/utils.js",
            "line": 311
          },
          {
            "location": "src/utils.js",
            "line": 312
          },
          {
            "location": "src/utils.js",
            "line": 313
          },
          {
            "location": "src/utils.js",
            "line": 345
          },
          {
            "location": "src/utils.js",
            "line": 351
          },
          {
            "location": "src/utils.js",
            "line": 357
          },
          {
            "location": "src/utils.js",
            "line": 385
          },
          {
            "location": "src/utils.js",
            "line": 402
          },
          {
            "location": "src/utils.js",
            "line": 403
          },
          {
            "location": "src/utils.js",
            "line": 404
          },
          {
            "location": "src/utils.js",
            "line": 405
          },
          {
            "location": "src/utils.js",
            "line": 406
          },
          {
            "location": "src/utils.js",
            "line": 407
          },
          {
            "location": "src/utils.js",
            "line": 408
          },
          {
            "location": "src/utils.js",
            "line": 417
          },
          {
            "location": "src/utils.js",
            "line": 421
          },
          {
            "location": "src/utils.js",
            "line": 428
          },
          {
            "location": "src/utils.js",
            "line": 429
          },
          {
            "location": "src/utils.js",
            "line": 430
          },
          {
            "location": "src/utils.js",
            "line": 432
          },
          {
            "location": "src/utils.js",
            "line": 433
          },
          {
            "location": "src/utils.js",
            "line": 434
          },
          {
            "location": "src/utils.js",
            "line": 435
          },
          {
            "location": "src/utils.js",
            "line": 436
          },
          {
            "location": "src/utils.js",
            "line": 454
          },
          {
            "location": "src/utils.js",
            "line": 462
          },
          {
            "location": "src/utils.js",
            "line": 484
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uvu",
      "version": "0.5.6",
      "description": "uvu is an extremely fast and lightweight test runner for Node.js and the browser",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa0f043517b2afc62c39ce9fbff35526cdaf15d1c19c135d7c4e3daec86b4f30d63a5531e06abb28e4b6183f1eaa1cb68fe123ab6f7e49b287f328e402a5eaa0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uvu@0.5.6",
      "type": "library",
      "bom-ref": "pkg:npm/uvu@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uvu"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "test"
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
        "pkg:npm/@jridgewell/trace-mapping@0.3.19"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/source-map@0.3.5",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.3",
        "pkg:npm/@jridgewell/trace-mapping@0.3.19"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.19",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.1",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15"
      ]
    },
    {
      "ref": "pkg:npm/@types/globrex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@20.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dequal@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@5.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globalyzer@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globrex@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kleur@4.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-character@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/magic-string@0.30.3",
      "dependsOn": [
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.15"
      ]
    },
    {
      "ref": "pkg:npm/mri@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sade@1.8.1",
      "dependsOn": [
        "pkg:npm/mri@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/tiny-glob@0.2.9",
      "dependsOn": [
        "pkg:npm/globalyzer@0.1.0",
        "pkg:npm/globrex@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ts-api-utils@1.0.2",
      "dependsOn": [
        "pkg:npm/typescript@5.0.4"
      ]
    },
    {
      "ref": "pkg:npm/typescript@5.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uvu@0.5.6",
      "dependsOn": [
        "pkg:npm/dequal@2.0.3",
        "pkg:npm/diff@5.1.0",
        "pkg:npm/kleur@4.1.5",
        "pkg:npm/sade@1.8.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/dts-buddy@0.2.5"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.5",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.5",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.5",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-10-10T06:31:10Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Saturday, October 10, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'dts-buddy' with version '0.2.5'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: pnpm-lock.yaml."
    }
  ]
}